Controllable: Only extract actions that bind exits.

The `uncontrolled` heuristic was too aggressive at merging Interleavings
otherwise, as demonstrated by the `full_sample` in LOTOS.hs.