Shutdown race with use after free in DeadlineFuture

The callback in DeadlineFuture is using the _mutex before checking that the callback itself is canceled.
We do wait properly in the HealthObserver for the thread pool termination, the DeadlineFuture instance is guaranteed to be available if the callback args are checked. Also, would be nice to check the cancelation token as well.