Add timeouts to all regular expressions

[andrei-epure-sonarsource]

We have 22 security hotspots because of not using regex timeouts.

We should use a timeout for all. I'd say that 500 ms should ensure we won't be too strict without having some data to rely on. We don't search for patterns in whole files, we only limit it to syntax nodes. Even 500 ms seems a lot, but we 'd need to do tests on various hardware to find a good value.

The source generator should be treated separately.

[martin-strecker-sonarsource]

We already have:

sonar-dotnet/analyzers/src/SonarAnalyzer.Common/Common/RegexConstants.cs

Line 25 in 1820ab2

public static TimeSpan DefaultTimeout => TimeSpan.FromMilliseconds(100);