introduce Scheduler#on_error(job, err)

pipe to $stderr
do not feed KillSignal to #on_error