reapAll
Kill and drop every active eval. Safe from any thread: drains concurrent queues; kill is idempotent. Two callers: an auth revoke (on the pump thread, which keeps pumping and so self-heals any straggler still compiling), and reapOnStop.