Hyperion: Think of a way to do a global timeout/heartbeat for plans as well callbacks

When running in GDA mode we would have a global timeout where if Hyperion had not given back control for a long time (and there was beam) we would raise an error assuming Hyperion had hung. We should have some way of checking this when in UDC mode.

## Notes
* We could also do this from an external service monitoring a heartbeat?

## Acceptance Criteria
- If Hyperion has hung waiting on something (not beam a dump) for more than 10 minutes then an error is raised and UDC is stopped