fix(ci): repair boj-build.yml startup_failure (missed by #360)

#360 added timeout-minutes estate-wide and fixed changelog-reusable.yml, but
could not touch boj-build.yml because it does not parse: two trailing steps
(K9-SVC Validation, Contractile Check) had dropped to 2-space indentation,
out of the 'steps:' list, so GitHub fails to compile it on every push
(startup_failure, 0 jobs). Re-indent those steps to 6 spaces and add the
job-level timeout-minutes the estate convention expects.

The job stays gated on 'if: vars.BOJ_SERVER_URL != ...', so it skips cleanly
when unconfigured. Validated with PyYAML. Addresses the repair side of
standards#331. No SPDX header or licence content touched.

https://claude.ai/code/session_011xv3VLrqeXkpjXxUojKz82

Author: claude

.github/workflows/boj-build.yml

@@ -18,6 +18,7 @@ permissions:
 jobs:
   trigger-boj:
     runs-on: ubuntu-latest
+    timeout-minutes: 10
     if: ${{ vars.BOJ_SERVER_URL != '' || secrets.BOJ_SERVER_URL != '' }}
     steps:
       - name: Checkout
@@ -47,31 +48,31 @@ jobs:
             --data "$payload" \
             || echo "BoJ server unreachable - skipping (non-fatal)"
 
-  - name: K9-SVC Validation
-    run: |
-      echo "Running K9-SVC contractile validation..."
-      if [ -f .machine_readable/contractiles/must/Mustfile.a2ml ]; then
-        echo "✅ Mustfile found - running validation"
-        # Placeholder for actual K9 validation
-        echo "K9 validation would run here"
-      else
-        echo "❌ Mustfile not found"
-        exit 1
-      fi
-      
-  - name: Contractile Check
-    run: |
-      echo "Checking contractile completeness..."
-      contractiles=("must" "trust" "dust" "lust" "adjust" "intend")
-      missing=0
-      for c in "${contractiles[@]}"; do
-        if [ ! -f ".machine_readable/contractiles/$c/${c^}file.a2ml" ]; then
-          echo "❌ Missing: $c"
-          missing=$((missing + 1))
-        fi
-      done
-      if [ $missing -gt 0 ]; then
-        echo "❌ $missing contractiles missing"
-        exit 1
-      fi
-      echo "✅ All contractiles present"
+      - name: K9-SVC Validation
+        run: |
+          echo "Running K9-SVC contractile validation..."
+          if [ -f .machine_readable/contractiles/must/Mustfile.a2ml ]; then
+            echo "✅ Mustfile found - running validation"
+            # Placeholder for actual K9 validation
+            echo "K9 validation would run here"
+          else
+            echo "❌ Mustfile not found"
+            exit 1
+          fi
+          
+      - name: Contractile Check
+        run: |
+          echo "Checking contractile completeness..."
+          contractiles=("must" "trust" "dust" "lust" "adjust" "intend")
+          missing=0
+          for c in "${contractiles[@]}"; do
+            if [ ! -f ".machine_readable/contractiles/$c/${c^}file.a2ml" ]; then
+              echo "❌ Missing: $c"
+              missing=$((missing + 1))
+            fi
+          done
+          if [ $missing -gt 0 ]; then
+            echo "❌ $missing contractiles missing"
+            exit 1
+          fi
+          echo "✅ All contractiles present"