Cap the Geo retry_at value to prevent out of range timestamps

Merged Stan Hu requested to merge sh-geo-cap-retries into master

If an error occurred removing the repository, it's possible that that the should_redownload value were set to true and retry_count was extremely high, which would cause the retry_at value to exceed the allowable value as seen in #4083 (closed).