Stopping a sandbox always completes

A stop that could not be recorded used to leave the sandbox in stopping permanently, and every request on it returned 500 operation_failed. The stop is now retried automatically every 5 minutes until the sandbox is stopped; meanwhile requests on it still return 500 operation_failed immediately, its files are kept, and nothing is charged. Sandboxes already stuck in stopping are stopped by the same retry.