Since the Conn does not have a timeout by default, it's possible for a
connection to hang if the remote side crashes before responding.  This
PR ensures that every interaction with the broker has a deadline so that
the consumer group won't get stuck if the coordinator goes down.