refactor: fail updates worker when pipeline steps fail

Treat system app fetch or update‑enqueue failures as hard failures so the WorkManager job reflects pipeline failures instead of masking them, and the system can reschedule promptly rather than waiting for the next auto‑update window.