tests/sys/audit: fix timeout calculation

[arichardson]

Summary

This changes the behaviour to a 30s total timeout (needed when running
on slow emulated uniprocessor systems) and timing out after 10s without
any input.
This also uses timespecsub() instead of ignoring the nanoseconds field.

Test Plan

Runs more reliably on QEMU and times out less regularly