fix(ci): Fix GitHub Actions workflow timeout and permissions issues

Root cause analysis:
1. Jobs exceeded 6-hour timeout due to recursive test execution
2. test-reporter action lacked necessary permissions

Fixes applied:
✅ Add reasonable timeout-minutes to all jobs (10-30 minutes)
✅ Add permissions block (contents:read, checks:write, pull-requests:write)
✅ Exclude Demo projects from test execution with filter
✅ Add timeout to test step specifically (10 minutes)

Changes:
- build job: 30-minute timeout + permissions
- test step: 10-minute timeout + filter out Demo projects
- code-quality job: 15-minute timeout
- package job: 15-minute timeout
- publish-demo job: 15-minute timeout

The filter 'FullyQualifiedName!~Demo' prevents:
- TestingServiceDemo from running real tests during CI
- RealTestExecutionDemo from executing actual dotnet test commands
- Recursive/circular test execution scenarios

This ensures CI completes in reasonable time while still running
all actual unit and integration tests.

🤖 Generated with Claude Code (https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

Author: Ahmed Mustafa

.github/workflows/build.yml

@@ -15,6 +15,11 @@ jobs:
   build:
     name: Build and Test
     runs-on: ${{ matrix.os }}
+    timeout-minutes: 30
+    permissions:
+      contents: read
+      checks: write
+      pull-requests: write
     strategy:
       matrix:
         os: [ubuntu-latest, windows-latest, macos-latest]
@@ -42,7 +47,8 @@ jobs:
       run: dotnet build ${{ env.SOLUTION_FILE }} --configuration ${{ matrix.configuration }} --no-restore
 
     - name: Run tests
-      run: dotnet test ${{ env.SOLUTION_FILE }} --configuration ${{ matrix.configuration }} --no-build --verbosity normal --logger "trx;LogFileName=test-results.trx"
+      run: dotnet test ${{ env.SOLUTION_FILE }} --configuration ${{ matrix.configuration }} --no-build --verbosity normal --logger "trx;LogFileName=test-results.trx" --filter "FullyQualifiedName!~Demo"
+      timeout-minutes: 10
 
     - name: Upload test results
       uses: actions/upload-artifact@v4
@@ -62,6 +68,7 @@ jobs:
   code-quality:
     name: Code Quality Analysis
     runs-on: ubuntu-latest
+    timeout-minutes: 15
 
     steps:
     - name: Checkout code
@@ -86,6 +93,7 @@ jobs:
   package:
     name: Create NuGet Packages
     runs-on: ubuntu-latest
+    timeout-minutes: 15
     needs: [build, code-quality]
     if: github.event_name == 'push' && github.ref == 'refs/heads/main'
 
@@ -119,6 +127,7 @@ jobs:
   publish-demo:
     name: Publish Sample Applications
     runs-on: ubuntu-latest
+    timeout-minutes: 15
     needs: build
     if: github.event_name == 'push' && github.ref == 'refs/heads/main'