let the store container's cold start finish, and order its readers after it

nix/host-modules/swarm-bao.nix

@@ -4136,6 +4136,12 @@ in
       containers.${cfg.machine} = {
         autoStart = true;
         ephemeral = false;
+
+        # The container is `Type=notify`, so its start job waits for OpenBao,
+        # whose first start after a restart takes 60-144 s opening the raft
+        # storage. The 1min default kills it mid-open and every retry is cold.
+        timeoutStartSec = "5min";
+
         inherit privateNetwork;
 
         # Only material an operator has to be able to back up crosses the