Retention policy in Conductor (#380)

Implement the retention policy protocol in Conductor.
- A new message type `retention`. This will trigger both garbage
collection and global timeout.
- Change the input of global timeout to a cut off timestamp instead of
an interval. This change will make it easier to support batch
cancellation.