feat(ci): roll out failure tracker to all main workflows

[h0lybyte]

Summary

• Wires utils-ci-failure-tracker into all 11 remaining workflows per the rollout plan in [CI] Roll out failure tracker to all main workflows #8186
• Normalizes existing ci-docker-smoke-test.yml trackers to use always() + status pass-through (enables auto-close on recovery)
• Uses consistent pattern across all workflows: if: always(), needs: [job], status: ${{ needs.job.result }}

Rollout coverage

Phase	Workflow	Jobs tracked
1 - Scheduled	ci-docker-smoke-test.yml	resolve_digests, smoke_build, create_pr (fixed existing)
1 - Scheduled	ci-monday-e2e.yml	discover, e2e, summary
1 - Scheduled	ci-weekly-nx-report.yml	generate
1 - Scheduled	ci-security.yml	codeql, codeql-rust
2 - Dev/Atom	ci-atom.yml	run_tests, auto_merge
2 - Dev/Atom	ci-dev.yml	dev_to_main_pr, dev_docker_mc, validate_pr
3 - Main	ci-main.yml	globals, call_sync, alter, dispatch_docker, dispatch_publish
4 - Remaining	ci-sync.yml	sync_dev_with_main, cleanup_orphaned_atomic_branches
4 - Remaining	ci-mc-headless-e2e.yml	headless-e2e
4 - Remaining	transfer-scripts.yml	release
4 - Remaining	i-label.yml	all label jobs (aggregated)

Test plan

• Verify YAML syntax is valid (validated locally with js-yaml)
• Confirm tracker jobs appear in workflow run UI after merge
• Trigger a workflow_dispatch on a scheduled workflow to verify tracker fires

Closes #8186

[github-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ⚠️ 3 package(s) with unknown licenses.

See the Details below.

License Issues

.github/workflows/ci-mc-headless-e2e.yml

Package	Version	License	Issue Type
KBVE/kbve/.github/workflows/utils-ci-failure-tracker.yml	dev	Null	Unknown License

.github/workflows/i-label.yml

Package	Version	License	Issue Type
KBVE/kbve/.github/workflows/utils-ci-failure-tracker.yml	dev	Null	Unknown License

.github/workflows/transfer-scripts.yml

Package	Version	License	Issue Type
KBVE/kbve/.github/workflows/utils-ci-failure-tracker.yml	dev	Null	Unknown License

OpenSSF Scorecard

Package	Version	Score	Details
actions/KBVE/kbve/.github/workflows/utils-ci-failure-tracker.yml	dev	Unknown	Unknown
actions/KBVE/kbve/.github/workflows/utils-ci-failure-tracker.yml	dev	Unknown	Unknown
actions/KBVE/kbve/.github/workflows/utils-ci-failure-tracker.yml	dev	Unknown	Unknown

Scanned Files

• .github/workflows/ci-mc-headless-e2e.yml
• .github/workflows/i-label.yml
• .github/workflows/transfer-scripts.yml