Add orchestrator timeout and resource limits

The orchestrator can run indefinitely if pi hangs. Should add:

• Per-iteration timeout (e.g. 10 minutes for coder, 5 for reviewer)
• Overall timeout (e.g. 30 minutes total)
• Maybe cost limits via OpenRouter budget

Currently we used 'timeout 600' in testing but this should be built into the script.