Retry failed sweep items through the engine's reopening policy.

The quota-neutral bernayser:write action atomically moves eligible failed items to approved, increments their attempts, updates totals and records the matching receipt. A completed batch reopens to admitting only when an item moved, while items at three attempts remain failed. Unknown ownership is not_found. Recover from scope_missing with a catalog key and retry transient failures only after retry_after_sec. Requires the explicitly minted bernayser:write scope; bernayser:read permits safe projections and bernayser:write permits mutations. This BERNAYSER operation is quota-neutral. While dark it returns not_found, and a valid key without the required scope receives scope_missing. Fix a non-retryable request or credential before retrying; for rate_limited or service_unavailable, wait for retry_after_sec and retry once.