Add time limits for ownership transfers

[mattsse]

Currently the transfer_* functions don't enforce a limit in which the pending owner must accept the transfer.

Expected behavior
A triggered transfer is only valid for x amount of blocks. The pending owner has x amount of blocks time to accept ownership otherwise the pending transfer is revoked.

An additional Timeout as config type makes sense here probably.