Quarantine a call whose pipeline won't stop; don't restart the worker
A cancellation timeout on one call proves only that its shutdown is unconfirmed, not that the process is broken. One incident had two faults. A Pipecat CancelFrame could legitimately wait about 20 seconds, but the runner's outer stop deadline was about 8 seconds, so slow cancella…