Bounded public auth and trust timeout fallbacks

Bounded the public auth and trust read paths so a slow Supabase round-trip degrades to a fast structured fallback. Keeps the public trust surface honest while protecting request-thread budgets.