The post-merge dep-PR step races the producer's image-build workflow
and fails 404 before the tag is pushed. resolve_container_digest gains
a timeout_s retry (15s interval); --verify-timeout exposes it
(default 600s).
Generated with [Devin](https://devin.ai)
Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>