- entrypoint.sh: bound the target connectivity check with -w 2 (nc -z had
no timeout at all, the only unbounded step in the startup path)
- tests/entrypoint.bats: widen wait_for_log's budget from 5s to 10s
Merge-triggered runs land on a colder runner (Docker cache evicted by other
repos' scheduled jobs since the PR was last tested) than PR-check runs, and
the first backgrounded entrypoint.sh in the suite was occasionally landing
just past the old 5s window — always passed on rerun once warm.