fix(create-astro): add timeout to npm registry fetch to prevent hanging

[matthewp]

Changes

• Adds a 10 second timeout to the npm registry fetch in create-astro to prevent indefinite hanging when the registry is slow or unresponsive
• Adds a warning message when the fetch fails: "Unable to fetch latest {package} version from the npm registry. Using fallback version."
• The CLI will now continue with the fallback version instead of hanging forever

Testing

Manual tested while npm registry was acting weird

Docs

N/A, bug fix

[changeset-bot]

🦋 Changeset detected

Latest commit: e2a708a

The changes in this PR will be included in the next version bump.

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[github-actions]

⚠️ Package Trust Level Decreased

Caution

Decreased trust levels may indicate a higher risk of supply chain attacks. Please review these changes carefully.

📦 Package	🔒 Before	🔓 After
eslint-plugin-regexp	trusted-with-provenance	none
@cloudflare/kv-asset-handler	trusted-with-provenance	none
@cloudflare/unenv-preset	trusted-with-provenance	none
workerd	trusted-with-provenance	none
@sveltejs/vite-plugin-svelte-inspector	trusted-with-provenance	provenance
@sveltejs/vite-plugin-svelte	trusted-with-provenance	provenance
jsdoc-type-pratt-parser	trusted-with-provenance	none
miniflare	trusted-with-provenance	none
youch	provenance	none
@cloudflare/workerd-darwin-64	trusted-with-provenance	none
@cloudflare/workerd-darwin-arm64	trusted-with-provenance	none
@cloudflare/workerd-linux-64	trusted-with-provenance	none
@cloudflare/workerd-linux-arm64	trusted-with-provenance	none
@cloudflare/workerd-windows-64	trusted-with-provenance	none
wrangler	trusted-with-provenance	none

[vicb]

LGTM, one tiny nit.

Thank you so much for the fast turn around