feat(storage/s3): make S3 socket timeout configurable

The hardcoded socketTimeout: 3000 (introduced in d682bc0 along with
stream-based downloads) aborts in-flight R2/S3 GetObject body sockets
whenever the response stream is paused for >3s by backpressure from
either the client response or the merge upload, surfacing as
ECONNRESET on /download/<id>.

Expose STORAGE_S3_SOCKET_TIMEOUT_MS so deployments hitting this can
raise it without forking. Default kept at 3000 to preserve current
behavior.

Author: devunt

.github/workflows/release-penxle.yml

@@ -0,0 +1,50 @@
+name: Release (penxle)
+
+on:
+  push:
+    tags:
+      - 'v*-penxle.*'
+  workflow_dispatch:
+
+jobs:
+  build:
+    name: Build and push image
+    permissions:
+      packages: write
+      contents: read
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+
+      - name: Get build hash
+        id: build_hash
+        run: echo "COMMIT_SHA=$(git rev-parse --short HEAD)" >> $GITHUB_OUTPUT
+
+      - name: Extract metadata
+        id: meta
+        uses: docker/metadata-action@v6
+        with:
+          images: ghcr.io/${{ github.repository }}
+          tags: |
+            type=ref,event=tag
+
+      - name: Login to GitHub Container Registry
+        uses: docker/login-action@v4
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v4
+
+      - name: Build and push
+        uses: docker/build-push-action@v7
+        with:
+          context: .
+          platforms: linux/arm64
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          build-args: |
+            BUILD_HASH=${{ steps.build_hash.outputs.COMMIT_SHA }}

lib/schemas.ts

@@ -8,6 +8,7 @@ export const envStorageDriverSchema = type.or(
     'AWS_ENDPOINT_URL?': 'string.url',
     'AWS_ACCESS_KEY_ID?': 'string',
     'AWS_SECRET_ACCESS_KEY?': 'string',
+    'STORAGE_S3_SOCKET_TIMEOUT_MS': 'number = 3000',
   },
   {
     STORAGE_DRIVER: type.unit('filesystem'),

lib/storage.ts

@@ -527,7 +527,7 @@ class S3Adapter implements StorageAdapter {
       region: env.AWS_REGION,
       requestHandler: new NodeHttpHandler({
         httpsAgent: agent,
-        socketTimeout: 3000,
+        socketTimeout: env.STORAGE_S3_SOCKET_TIMEOUT_MS,
       }),
     })