Fix build-cli timeout and cross protoc version

Two fixes:
1. Move timeout-minutes: 45 to ci.yml caller jobs — GitHub Actions
   ignores timeout-minutes in called reusable workflows; it must be
   set in the caller. The 15-min limit in build-cli.yml was never
   being overridden by our change there.

2. Install protoc 25.3 from GitHub releases in Cross.toml instead of
   apt's bundled version — the cross Docker image ships protoc < 3.15
   which rejects the `optional` keyword in proto3 syntax used by the
   substrait .proto files. Protoc 25.x supports it.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: edmondop

.github/workflows/ci.yml

@@ -13,6 +13,11 @@ env:
 jobs:
   build-cli:
     name: Build compiler
+    # substrait + DataFusion significantly increase compile time; 45 min gives
+    # enough headroom for a cold build on slow targets (Windows, macOS ARM64).
+    # Note: timeout-minutes in a called reusable workflow is ignored by GitHub
+    # Actions, so it must be set here in the caller.
+    timeout-minutes: 45
     strategy:
       matrix:
         target:
@@ -46,6 +51,7 @@ jobs:
 
   build-cli-linux:
     name: Build compiler (x86_64-unknown-linux-musl)
+    timeout-minutes: 45
     uses: ./.github/workflows/build-cli.yml
     with:
       target: x86_64-unknown-linux-musl

Cross.toml

@@ -1,10 +1,18 @@
 # Cross.toml — configuration for cross-compilation via the `cross` tool.
 # The `pre-build` commands run inside the cross Docker container before cargo build.
-# This is needed because `substrait` (via prost-build) requires `protoc` at compile time,
-# but the cross Docker images don't include it by default.
+# This is needed because `substrait` (via prost-build) requires protoc >= 3.15 at
+# compile time (proto3 optional fields), but the cross Docker images ship an older
+# protobuf-compiler from apt that rejects the `optional` keyword.
+# We download protoc 25.x from the official GitHub releases instead.
 
 [target.aarch64-unknown-linux-musl]
-pre-build = ["apt-get update && apt-get install -y protobuf-compiler"]
+pre-build = [
+  "apt-get update -q && apt-get install -yq curl unzip",
+  "curl -sL https://github.com/protocolbuffers/protobuf/releases/download/v25.3/protoc-25.3-linux-x86_64.zip -o /tmp/protoc.zip && unzip /tmp/protoc.zip -d /usr/local bin/protoc && rm /tmp/protoc.zip",
+]
 
 [target.aarch64-unknown-linux-gnu]
-pre-build = ["apt-get update && apt-get install -y protobuf-compiler"]
+pre-build = [
+  "apt-get update -q && apt-get install -yq curl unzip",
+  "curl -sL https://github.com/protocolbuffers/protobuf/releases/download/v25.3/protoc-25.3-linux-x86_64.zip -o /tmp/protoc.zip && unzip /tmp/protoc.zip -d /usr/local bin/protoc && rm /tmp/protoc.zip",
+]