GIT7, GIT8: the forge module keeps the runner's failed required steps and refuses a head by them; git_failed_steps and git_failed_steps_drop

merge-pull refuses a head at whose fingerprint a run failed a required step (policy-failed, naming run, module, step), from the
module's own state failed-steps kept from step-ended, with the seen keys of every step end and the deletion once no watched
branch's head nor open pull request's head names a commit. The two tools read it with its fill and drop a key after the hand act.

Builds: design 47 G §39, §83, §84, §85, §135, §475, §487, §548

Claude-Session: https://claude.ai/code/session_01JG73KEq4zoDfM9WtYpcQgZ

modules/gitea/module.json

@@ -29,6 +29,14 @@
       "options": {
         "key-ttl": true
       }
+    },
+    {
+      "name": "failed-steps",
+      "storage": "key-value",
+      "template": "state",
+      "options": {
+        "history": 1
+      }
     }
   ],
   "contributes": {
@@ -647,6 +655,11 @@
   ],
   "consumes": [
     "mesh-catalog.catalog-revision",
-    "mesh-catalog.registration-changed"
+    "mesh-catalog.registration-changed",
+    "mesh-pipeline-runner.step-ended",
+    "git.branch-moved",
+    "git.pull-updated",
+    "git.pull-closed",
+    "git.pull-merged"
   ]
 }