v1.4.0 — circuit breaker

Circuit breaker (CircuitBreakerHttpClient / BreakerPolicy): after a run of outages to a service the breaker opens and calls fail fast for a cooldown, then a half-open probe closes or re-opens it. Backpressure so a fleet of agents can't hammer a struggling downstream. Client errors never trip it; the clock is injected.