const MODEL_DOWNLOAD_TIMEOUT_SECS: u64 = 600;
Cap the one-time model download so a stuck transfer can’t wedge a request.