feat: wait for service shutdown until new build is complete

[ronivay]

this moves the possibly running xo-server/xo-proxy service stop to be done after new build is done to minimize downtime when running update.