Internal provider supervision tree.

Child order is an invariant: the watchdog starts before the provider, so reverse-order shutdown stops the provider (and wakes native waiters) while the watchdog is still alive. The provider synchronously installs its watch during init/1, closing the corresponding startup window.