Reset every running job whose started_at is older than max_age_minutes (default 5) back to queued. Recovers from the case where a Fly machine restart kills a worker mid-render — without this, those rows stay running forever and the operator has to SSH in to SQL-update them by hand.

Recently-started jobs are left alone so we don't yank work out from under a still-healthy worker.