Detect and replace failed replicas at the Master level

The Master should monitor and replace failed tablet replicas via config change when certain criteria are met. A high level design and rationale can be found in the Tablet Copy design doc.