Pipeline: don't move failed runs to Review

Omni/Pipeline.hs finalizeRun currently sets task status to review for every terminal run status, including failed runs. This caused auth-failed runs (e.g. pipeline-omni-fund-web-hs-t-654-1771559702, pipeline-omni-agentd-hs-t-362-1771559763, pipeline-omni-agent-prompt-compile-hs-t-394-1771559825) to push tasks t-654/t-362/t-394/t-395 into Review even though no valid work was produced. Expected: failed runs should reopen task (or keep in-progress with explicit failure handling), and only successful runs should transition to Review.