Rework request timeout handling

[kellyredding]

• remove ns-options
• make global timeout default to some 'high' convention, like 60s
• support an env var to override the global default, ANDSON_REQUEST_TIMEOUT or something
• support per-call timeouts that override all of the above