Worker: Now uses WorkerShutdown instead of SystemTerminate so that gevent/eventlet can distinguish from "WorkerLostError"