Fix teardown, stops and limits in the Framework

A full review of the Framework found teardowns that lost their instruments, runs that could hang, and limits that passed without being checked; this release fixes them and hardens the station.

• Fixed teardown phases losing their instruments after the first one, runs hanging when a phase timed out during a stop, teardown retries dropped under a stop, and teardown prompts closed by the stop that triggered them; a failed unit with an interactive teardown now reads FAIL, not ERROR.
• Fixed limits that could never be checked passing silently: a numeric limit written as text, in without a list, an invalid regex or a missing expected value is now refused when the procedure loads, with its line and column, and duplicate slot keys are refused too.
• Fixed shell phases not being stopped on timeout or stop, NaN and numpy measurement values losing the whole phase, and plug and worker errors going missing from the logs.
• Fixed runs with several attachments getting stuck in the upload queue after one network error, and OpenHTF, pytest and Robot runs without --upload being uploaded later; a stopped pytest or Robot run now uploads its finished tests as ABORTED.
• Improved station safety and the operator UI: only the operator UI's own commands are accepted locally, a reverted deploy is no longer applied at the end of a run, and a kiosk reload no longer brings back an answered prompt or loses one still open.