This adds a timeout for reading HTTP response headers.
It is needed because headers are fetched before a
read_timeout comes into effect.

It was necessary to patch the Net::BufferedIO core library
to prevent unwanted side effects the patch
- is behind the header_read_timeout_buffered_io feature feature_flag
- is only used when a request is made using the
  use_read_total_timeout option

Changelog: security