Instance failure threshold

Provide an interface for runner to communicate success or failure to use an instance. Track the number of consecutive failures and after a configurable threshold, remove the instance. Next steps are to emit a metric for how often this happens.

See #9