All Auction timer repeated actions should catch exceptions or have a way to recover

[Chris-Hibbert]

What is the Problem Being Solved?

#8296 is an example of a problem caused by a thrown exception inside a timer-scheduled action. When an exception is thrown within a repeated timer action, the timerService deschedules later actions.

Description of the Design

The auction relies on those repeated actions to continue happening for the health of the auction, so it should either catch exceptions, or arrange for recovery.

Security Considerations

The auction failing puts the vaultFactory at risk, which puts IST at risk.

Scaling Considerations

Not an issue.

Test Plan

test thoroughly.

Upgrade Considerations

We need to be able to upgrade the auction and vaultFactory in order to make changes. This depends on #8123, among other things.