Self-heal tart-kubelet from hung VM provisioning operations

Hung tart invocations no longer strand macOS runner Pods in Pending for minutes. Each VM operation now has a timeout, and the process wait is bounded so spawned child processes cannot keep the reconcile worker blocked after the timeout fires. This lets stalled provisioning fail fast and retry on its normal cadence.