feat: add timeout

[sozercan]

• add timeout variable
• updates jq to be specific to OS level vulns and makes it more resilient if those objects don't exist
• adds a github action for patching
• removes hard coded example from readme
• updates readme to have a table

[ashnamehrotra]

looks like the build test is failing, I think we need to access BATS version with ${{ env.BATS_VERSION }}

[sozercan]

~ci should succeed after merge~ ~example: https://github.com/sozercan/copa-action/actions/runs/7547364071~

removed pr trigger as it doesn't make sense, it is still push to main triggered