feat(runners): add hotfix runner lane with subprocess timeout

[POWERFULMOVES]

Summary

• Adds dedicated hotfix runner lane (gha-runner-hotfix) with 2 CPU / 4GB memory defaults for fast-turnaround CI jobs
• Adds timeout parameter to run_cmd() (default 120s) to prevent hangs on Docker/gh CLI failures
• Uses timeout=15 for docker info calls specifically

Test plan

• py -3 -c "import ast; ast.parse(open('pmoves/tools/local_cert_runners.py').read())" — syntax OK
• py -3 pmoves/tools/local_cert_runners.py status — verify hotfix lane appears in output
• py -3 pmoves/tools/local_cert_runners.py up --lane hotfix — verify hotfix container starts

🤖 Generated with Claude Code

Summary by CodeRabbit

• New Features
  • Added a new "hotfix" runner lane with dedicated container and resource configuration.
  • Implemented timeout support for command execution with configurable timeout values.

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.

[coderabbitai]

Warning

Rate limit exceeded

@POWERFULMOVES has exceeded the limit for the number of commits that can be reviewed per hour. Please wait 19 minutes and 4 seconds before requesting another review.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

ℹ️ Review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: b6faba98-f7ae-4be8-9ca9-4e161457062f

📥 Commits

Reviewing files that changed from the base of the PR and between 3b0ebcf and 5e08232.

📒 Files selected for processing (1)

• pmoves/tools/local_cert_runners.py

📝 Walkthrough

Walkthrough

This change adds a new "hotfix" runner lane to the local certificate runner configuration system, introduces timeout parameter support to command execution with a 120-second default, and extends resource definitions for the new lane with corresponding CPU, memory, and GPU settings.

Changes

Cohort / File(s)	Summary
Hotfix Lane & Timeout Support pmoves/tools/local_cert_runners.py	Added "hotfix" runner lane to LANES configuration with Docker container and runner name; introduced timeout parameter (default 120s) to run_cmd function; applied 15s timeout to Docker info query in _runner_log_args; extended LANE_RESOURCES with "hotfix" CPU/memory/GPU settings; updated docstring to reflect new lane.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

Poem

🐰 A hotfix lane now hops along,
With timeouts set to keep us strong,
Fifteen seconds for Docker's call,
One-twenty seconds to cover all,
Swift as rabbits, code runs clean! ✨

🚥 Pre-merge checks | ✅ 1 | ❌ 2

❌ Failed checks (2 warnings)

Check name	Status	Explanation	Resolution
Description check	⚠️ Warning	The description includes a summary of changes and test plan, but is missing critical required sections: Testing command output/results, CHIT Contract Check acknowledgment, and documentation updates acknowledgment.	Complete the Testing section with actual command outputs, check the required checkboxes (CHIT Contract Check, contracts/schemas update, and documentation), and add any reviewer notes if needed.
Docstring Coverage	⚠️ Warning	Docstring coverage is 0.00% which is insufficient. The required threshold is 80.00%.	Write docstrings for the functions missing them to satisfy the coverage threshold.

✅ Passed checks (1 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly and concisely summarizes the two main changes: adding a hotfix runner lane and introducing subprocess timeout support.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch feat/hotfix-runner-lane

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[coderabbitai]

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents

Verify each finding against the current code and only fix it if needed.

Inline comments:
In `@pmoves/tools/local_cert_runners.py`:
- Around line 49-57: run_cmd currently lets subprocess.TimeoutExpired bubble up
(breaking callers that rely on check=False to get a CompletedProcess); wrap the
subprocess.run call in a try/except for subprocess.TimeoutExpired, and if a
timeout occurs: re-raise the exception only when check is True, otherwise return
a subprocess.CompletedProcess instance representing a failed run (non-zero
returncode, empty or exception-derived stdout/stderr) so callers like
_runner_log_args and docker_rm can gracefully fall back.

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: aaf6ba9a-e1bf-46ae-8387-d6ca05072080

📥 Commits

Reviewing files that changed from the base of the PR and between 11687a4 and 3b0ebcf.

📒 Files selected for processing (1)

• pmoves/tools/local_cert_runners.py