Give outer cron deadlines headroom beyond inner work budgets
A strict one-shot scheduler timeout must exceed the application's internal processing deadline plus container startup, name resolution and TLS, proxy routing, response serialization, and cancellation margin. Otherwise ordinary routing variation can make the caller exit nonzero ev…