circuit breaker handler

In order to short circuit upstream handlers so they are not called under
failure scenarios from dependent upstreams, this package implements a
sliding window average check against a threshold of failures before
always serving 503 with an empty body during a cooldown period.