Cap the Geo retry_at value to prevent out of range timestamps
If an error occurred removing the repository, it's possible that that the
should_redownload value were set to
retry_count was extremely high, which would cause the
retry_at value to exceed the allowable value as seen in #4083 (closed).