* attacker: Simplify timeout configuration

This commit simplifies the timeout configuration internally to make use
of the `http.Client.Timeout` field which didn't exist when this code was
originally written.

It also fixes #396: a test flake of `TestTimeout`.

* Update lib/attack_test.go