Forcefully restart workers that exceed the heap limit
Forcefully restart workers that exceed the heap limit

Only calling disconnect() does not reliably exit the worker, especially if
there are open outgoing connections to databases etc. This patch forcefully
exits the process 60 seconds later, after giving ongoing requests enough time
to finish.

In the interest of quicker recovery the fail count is also slightly reduced
from 5 to 3.

wikimedia/service-runner,Pchelolo/service-runner,d00rman/service-runner,nyurik/service-runner,gwicke/service-runner