RAII handle that holds a GracefulShutdownTracker registration. Drop
it to release the registration. Used by long-running shutdown
orchestrators (e.g. backend Worker) to keep Runtime::shutdown’s
Phase 2 wait alive until they finish — otherwise Phase 3 cancels the
main token and tears down NATS/etcd while the orchestrator is still
running drain/cleanup.