`checkMaintainerInLFX` needs some re-thinking

[jeefy]

maintainers.go:243 creates a bare &http.Client{} instead of using the validator's injected pv.client. This means:

• No timeout configured (could hang indefinitely on a slow/unresponsive LFX API)
• Can't be tested with httptest since the client isn't injectable
• Currently broken anyway due to no long-lived LFX token (TBD)

[ahmadqasembader]

@jeefy

1. We can handle the timeout by using the DefaultHTTPTimeout from defaults.go from issue Variable cleanup / proper runtime config #298 once it's merged to main. We can also increase the value, which is by default 30 second by adding multipers (x2 or x3) to handle slow LFX APIs

2. The bare &http.Client{} should be replaced with the validator's injected pv.client, which already has the proper timeout. This also makes it testable via httptest. And once we resolve the LFX Token issue, we can test with real API calls

3. This is an external issue. What repo from the LF projects handles the LFX API?