Prevent confusing behaviour if #shutdown called twice...

You'd end up with two timers running, and clear_healthcheck_timeout
would only clear the newest, so the app could shut down prematurely even
if it was getting health checks just fine.
Expose #shutting_down? as a public method
Bump version to 0.1.2