Adds public behavioral tests, a 30-second default request timeout, per-request timeout overrides, AbortSignal cancellation, and structured timeout and cancellation errors. The README, contribution guide, security policy, and release gates are updated for the public SDK.