Implement OnionService::stop

We need to make sure that we can actually shut down an onion service, and that the associated stop function works. Failing that, we should remove stop, and make sure that shutdown_tx works.

See TODO (#1231) comments.