Expect a total rollback failure where nothing reached the end state

This PR makes rollback report status "error" (code rollback_failed)
when something failed and nothing was rolled back, already original or
not installed. Two tests still expected partial_failure for that case:

- e2e_bun_lockb's shared refused-binary-pin helper: the takeover caller
  sees alreadyOriginal 1 (partial_failure), but the alias/transitive
  caller sees 0, a total failure. Derive the expected status from
  alreadyOriginal.
- apply/bun_global_store rollback_refuses_bun_global_store_packages
  (from #1009, arrived via the main merge): every package is refused, so
  it is a total failure now.

Also merges origin/main.

Co-Authored-By: Claude <noreply@anthropic.com>

Author: claude

crates/socket-patch-cli/tests/apply/bun_global_store.rs

@@ -188,7 +188,10 @@ fn rollback_refuses_bun_global_store_packages() {
     );
 
     let v = run(&proj, "rollback");
-    assert_eq!(v["status"], "partial_failure", "{v}");
+    // Every package is refused and none reached the unpatched end state, so
+    // the run is a total failure.
+    assert_eq!(v["status"], "error", "{v}");
+    assert_eq!(v["error"]["code"], "rollback_failed", "{v}");
     assert_refused(&v, "pkg:npm/left-pad@1.3.0");
     assert_refused(&v, "pkg:npm/is-number@6.0.0");
     assert_eq!(std::fs::read(left_pad.join("index.js")).unwrap(), AFTER);

crates/socket-patch-cli/tests/e2e_bun_lockb.rs

@@ -130,9 +130,15 @@ fn rollback_refuses_binary_hosted_pin_then_checkout(fixture: &Fixture, server: &
         &["rollback", "--yes", "--patch-server-url", &uri],
     );
     assert_eq!(code, 1, "a binary hosted pin cannot be restored: {env}");
-    // The refused pin counts as a failure (#1066), but the installed copy is
-    // already original, so the run is a partial failure, not a total one.
-    assert_eq!(env["status"], "partial_failure", "{env}");
+    // The refused pin counts as a failure (#1066). When the installed copy
+    // is already original the run is a partial failure; when nothing reached
+    // the unpatched end state it is a total failure (`error`).
+    if env["alreadyOriginal"].as_u64().unwrap_or(0) > 0 {
+        assert_eq!(env["status"], "partial_failure", "{env}");
+    } else {
+        assert_eq!(env["status"], "error", "{env}");
+        assert_eq!(env["error"]["code"], "rollback_failed", "{env}");
+    }
     assert_eq!(env["failed"], 1, "{env}");
     let failed = env["hosted"]["failed"]
         .as_array()