Harden image generation timeout handling

[walker1211]

Summary

• Kill timed-out Codex/imagegen process groups before waiting for stdout/stderr readers.
• Set the default backend timeout to 300s and clarify max attempts as total attempts.
• Add regression coverage for canceled contexts and child processes holding pipes open.

Test plan

• go test ./...
• go build -o ./imgen ./cmd/imgen