Graceful shutdown

Also written: graceful

Boot's default stop behaviour: it stops taking new requests, lets running ones finish, then closes the pool. `timeout-per-shutdown-phase` caps the wait.