Flip this request's failed letters back to pending, for the shared drain to re-attempt on its next tick.

Without this a failed outbox row is terminal: re-broadcasting enqueues nothing because every idempotency key already exists, so one transport outage permanently under-delivered a request the operator believes went out. Only rows that FAILED are touched; sent stays sent, and a retry that fails again just lands back here.