Serialize IB Gateway recovery operations

[Pigbibi]

Summary

• add a host-level recovery lock around IB Gateway recovery operations
• make systemd healthcheck skip when another recovery is active
• stop the existing healthcheck timer at deploy start before docker compose operations

Tests

• bash tests/test_gateway_recovery_scripts.sh
• bash tests/test_workflow_shared_config.sh
• bash -n scripts/recover_ib_gateway_ready.sh
• bash -n scripts/install_gateway_health_watcher.sh
• bash -n scripts/restart_ib_gateway_daily.sh
• git diff --check