Ignore extra SIG_TIMESLICEs, and "upgrade" delivery of SIG_TIMESLICE to SIG* if SIG* arrives while processing the time-slice interrupt.

Resolves #405.  (Partly.)

This isn't a very well-tested patch, but it fixes the problems that arose in unit tests, and it should handle the cases I've seen while recording FF.