Modules: limit waiting for shared dict state save on exit
If a worker dies while saving a shared dict zone state, the writing
flag remains set in shared memory and survives reloads. Workers
with unsaved changes then receive NGX_AGAIN on every attempt and
keep rearming the save timer, so they never finish graceful shutdown.
Limit how long an exiting worker waits for an outstanding save to
60 seconds since the save started. The shared writing flag is not
cleared and the writer is not interrupted, so a slow save is not
disturbed. Running workers keep waiting as before.