Function until_cancelled 

pub fn until_cancelled<S>(service: S) -> UntilCancelled<S>
where
    S: SupervisedService,

Wraps a service so the supervisor cancellation token wins the outer race.

This is the convenient default for long-lived async loops that should stop as soon as the supervisor begins shutdown.