Graceful shutdown for Orchestrators

Is your feature request related to a problem? Please describe. Orchestrators can't currently shut down without breaking active sessions

Describe the solution you'd like CLI option to tell an O to stop accepting new sessions and to shut itself down cleanly when current sessions have finished

Describe alternatives you've considered Ideally this will happen automatically as part of a broader node upgrade automation, but this is a good first iteration.