Timeout the provider process group, not only its launcher
When a lifecycle watchdog invokes a command through a launcher, timing out the launcher alone may leave the actual provider client alive. Repeated attempts can then accumulate children, so the advertised timeout does not bound the operation. Start each call in a dedicated process…