Restart cortex on code.shipped callosum event
Extract _restart_service helper from _handle_supervisor_request and add
_handle_code_shipped handler that listens for code.shipped events and
triggers a graceful cortex restart. Skips if cortex is already mid-restart.