Testable governor

1. Governor logic should be testable without integration tests. To achieve this goal it should be implemented in the sans-io manner - instead of making net.box requests himself it should return a declarative plan of actions (let's call it agenda).
2. Let's finally move the governor into it's own module outside traft (because it's a wider concept). The io-aware part should adopt crate::r#loop module.