fix(ci): longer download timeout and retries for pip and uv

Several jobs on the NAPALM runner failed on ReadTimeoutError from
files.pythonhosted.org on 2026-10-22, none of them on the code.

CHANGELOG.md

@@ -13,6 +13,8 @@ The format follows [Keep a Changelog](https://keepachangelog.com/), versions fol
   device-types pilot).
 
 ### Fixed
+- The shared workflow waits 60 s per download and retries ten times, so a slow PyPI
+  response no longer fails a job.
 - `security` audited the runner's own pip instead of the package: pip-audit now
   checks a venv holding only the package and its dependencies.