Worker process exits if the job failure callback raises an exception.

This change traps exceptions raised while invoking the job failure callback to prevent the worker process from exiting.  Since this callback is invoked prior to permanently failing the job, it seems reasonable to just swallow the exception and remove the job.