Add a timeout property to Connection and pass timeout= to execute_sql()
in the three DBAPI code paths that currently omit it: snapshot reads,
transaction statements, and autocommit DML.

When timeout is None (the default), timeout= is not passed, preserving
the existing behavior of using gapic_v1.method.DEFAULT (3600s).

Fixes googleapis#16492