Forbid stopping a simulation run by pattern

Adds a rule to the instance-state section of the operations leaf: never stop a run with pkill -f or killall, which match every simulation running on the machine. Stop only your own run by the PID you started, or end the simulation with down for its named instance. Notes that simulation.sh writes no pidfile of its own.