flyemoji
2a93a9e0cb
Wire the build subsystem to the felis_image_build_failures_total counter (spec §23). It advances at the two terminal-failure producers: finishAt (the Sync JobFailed/JobUnknown verdict — a kaniko failure or a CRITICAL CVE from trivy's --exit-code 1) and Submit's job-creation bypass path, which records its failure directly without going through finishAt. Cancellations and successful builds are deliberately not counted. A delta-asserting test exercises both Inc sites plus a successful-build negative control that proves the StatusFailed guard discriminates rather than firing on every terminal write, all over the existing in-memory Store/Jobs fakes.