module init: kick the watchdog between module init calls

This kicks the watchdog after each module init call.

Currently, our entire module init sequence must execute in less than the watchdog timeout.  That could (eventually) result in certain sets of enabled modules triggering the watchdog expiry which could be very difficult to debug.

Now, each module has a full watchdog time to execute so we remove the arbitrary limit on the *total* init time being lower than the watchdog expiry time.