Report a failed repository adoption so the waiting browser can show the failure.

The CLI calls this endpoint when its local push fails. Only an exchanging session matching the authenticated API-key row id, workspace, and user is marked failed. Cookie sessions are rejected. Repeated reports, unmatched sessions, and sessions already completed are acknowledged without changing their state, so a completion that wins the race is preserved.