Budget the whole worker pass when raising model timeouts

When raising a model-call timeout inside a serial worker, compare the worst-case whole-pass duration with readiness freshness, startup healthcheck allowance, lease expiry, and shutdown grace. A longer request deadline does not extend any of those independent budgets. If readiness is recorded only after a full pass, several slow calls can exceed the health window even while each request remains valid. Validate the aggregate bound and cancellation or ownership behavior before deployment; changing only a per-request constant is not deployment-readiness evidence.

Applies when: a batch worker performs slow model or provider calls under separately configured lifecycle deadlines. Keywords: Railway worker model timeout batch readiness shutdown lease budget