4933af12db
The last untested arm of startLlamaProc was `case <-time.After(60 * time.Second)`, and it could not be tested as written — a test would have had to wait a real minute. It is Config.StartupTimeout now, defaulted to 60s in DefaultConfig and surfaced as phraser.startup_timeout, so the box can raise it: a cold 1.7B loading off a spinning disk can outrun 60s and that failed the boot with nothing to turn. The test asserts the child is dead, not just that the error came back. That arm is the one most likely to leak, because the child is alive and busy loading a model rather than already gone — so the fake records its pid before it hangs. startLlamaProc 90.9% → 95.7%, package 76.9% → 77.3%.