Does anyone do approaches where developers run CI locally on their machine and then somehow push up signed or authenticated artifacts?
But dev machines really shouldn't be part of the artifact supply chain. People do this, yes, but it's a security risk.
Of course you can increase the duration, but if something is supposed to take less than 10 minutes but takes over half an hour, increasing limits won't really address the problem at hand.