node

Graceful shutdown state machine

Simulate the shutdown sequence: stop accepting work, wait for in-flight work, then exit cleanly.