BM-1640: avoid bento cancellations on expired orders

[austinabell]

• Avoid cancelling lock and fulfill jobs after the lock expiry (will now only stop once another fulfillment)
• Add config option to continue cancelling job in bento (currently removing the job), otherwise defaults to keeping jobs running

Downside here is very much that capacity management will be worse. Before opening, I will look into if clean to keep tracking the proof instead of erroring to maintain that property, as this might be too risky and be a regression.