Fail recipes on workflow step errors

[chubes4]

Summary

• Make recipe failure detection reject any non-advisory failed workflow execution, not only after-phase verification failures.
• Add regression coverage for failed workflow steps and advisory failures.

Verification

• npx tsx tests/recipe-evidence-failures.test.ts
• npx tsx tests/nested-fuzz-suite-recipe-command.test.ts
• npm run build
• npm run test:playground-fuzz-suite-public

AI assistance

• AI assistance: Yes
• Tool(s): openai/gpt-5.5 via OpenCode
• Used for: Diagnosed the false-pass recipe outcome from the Lab Woo fuzzer and implemented the failure gate fix with Chris's direction.