fix(storage): bound AutoMigrate with configurable deadline #80

Job	Run time
jscpd (duplication < 3% on touched code)	10s
Semgrep (SAST)	25s
Trivy (filesystem + container scan)	17s
SBOM (SPDX + CycloneDX)	21s
Gitleaks (secret scan)	7s
OSV-Scanner (SCA)	7s
	1m 27s

Provide feedback