Separate out query service

We're starting to see various panics and bugs arising from query processing, and if they send the distributors into a crash loop, we stop accepting writes.  A separate query service would prevent this.