ci: retry check-toml-format and cargo-deny-licenses on stuck/timeout

Both jobs occasionally get stuck on unstable runners with no output
for 40-50+ minutes (empty log, runner preparing phase freeze). Without
explicit retry, they fail the pipeline with stuck_or_timeout_failure.

retry: max: 1, when: stuck_or_timeout_failure retries only on genuine
runner freezes, not on taplo format errors or license violations.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

.gitlab-ci.yml

@@ -69,6 +69,9 @@ check-toml-format:
   stage: quick-checks
   variables:
     CARGO_HOME: /root/.cargo
+  retry:
+    max: 1
+    when: stuck_or_timeout_failure
   script:
     - taplo format --check --config .config/taplo.toml
     - echo "Run 'taplo format --config .config/taplo.toml' to fix TOML issues"
@@ -233,6 +236,9 @@ cargo-deny-licenses:
   stage: security
   needs: []
   before_script: []
+  retry:
+    max: 1
+    when: stuck_or_timeout_failure
   script:
     - cargo install cargo-deny --locked -q
     - cargo deny check licenses --config deny.toml