chore(autopilot-core): add codeowners, harden workflow permissions, extend operator timeout coverage (#14)

* chore: add codeowners and harden workflow permissions

Enterprise governance hardening:
- Add explicit /.github/ ownership to CODEOWNERS where missing.
- Add top-level least-privilege permissions (default contents: read)
  to workflows lacking one, granting only the scopes each needs.
- Add timeout-minutes to jobs missing one.
YAML hardening only; no build logic, scripts, or step contents changed.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

* fix: extend operator timeout coverage

---------

Co-authored-by: Kim Harjamäki <kim.harjamaki@prosimo.fi>
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>

Author: 3 people