Changes

*If there is an error creating the work item, we will fall back to the old way of updating: using updater.exe. *If there is an error parsing the `work item` we assume it is not a valid work item that will be processed by the service.*If there is an error creating the process, or during update, or a sign check error, an error is written to update.status and info is reported via telemetry on the next restart of the callback application. The next restart of the callback application will also set the status back to pending so that the update will be applied next time without the service.* If there are more than 10 consecutive service specific errors, the service will automatically disable itself and reset this count to 0. A user can re-enable the service via preferences.