A guard against a failed monitoring path
If almost every probe fails at once while Prometheus still reaches the probing engine, the monitor can now pause per-device messages, send one MONITORING PATH FAILURE message instead, and release held alerts in grouped messages when it clears. It starts in shadow mode so its judgement can be reviewed first.