Introduce limits for number of active processes

[shepmaster]

This also fuses together the unique ID generation with resource concurrency limits.

As part of this, we expose some hooks that we can use to provide metrics about how many people are waiting for containers / processes.