Improve observability of GitHub workflows

.github/workflows/ci-digest.yml

@@ -0,0 +1,24 @@
+name: "CI digest"
+
+# Weekly summary of how often this repo's workflows fail and how long they take,
+# compared with the previous 12 weeks. The logic is in forms-deploy.
+#
+# For now it is a dry run: the digest goes to the job summary and nothing is
+# posted to Slack. See reusable-ci-digest.yml in forms-deploy for how to go live.
+
+on:
+  schedule:
+    - cron: "12 8 * * 1" # Mondays, around 09:00 UK time
+  workflow_dispatch:
+
+permissions: {}
+
+jobs:
+  digest:
+    name: "CI digest"
+    permissions:
+      actions: read
+      contents: read
+    uses: govuk-forms/forms-deploy/.github/workflows/reusable-ci-digest.yml@main
+    secrets:
+      SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_GOVUK_FORMS_DEPLOYMENTS }}

.github/workflows/terraform.yml

@@ -9,6 +9,7 @@ on:
 jobs:
   terraform:
     runs-on: ubuntu-latest
+    timeout-minutes: 15
     steps:
       - name: Checkout code
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

.github/workflows/test.yml

@@ -19,6 +19,7 @@ permissions:
 jobs:
   build_and_test:
     runs-on: ubuntu-latest
+    timeout-minutes: 20
     services:
       postgres:
         image: postgres:16-alpine