embiggen file descriptor limits

HTTP API + lots of work = lots of connections open
make packaging specs more specific
make shutdown safer
simplify hurler fanout logic

this was attempting to fix its pretty crazy memory consumption. still not
fixed, but now simpler. added profiler.
guard against host with no endpoints
make panics in subscription callback safe

saw this happen once, not sure why