Supervision for the worker's consume loop. A failed receive arrives as the queue handle's typed fault value, which the step logs and backs off from at its own pacing. Residue, an exception escaping a dependency's typed contract, is superviseLoop's concern under the caller's policy.

Shutdown cancels the loop thread, and an un-acked in-flight message simply redelivers, which is safe because publishing is idempotent.