Low: libpe_status: match last failures more exactly

so it's more efficient (and avoids problems in the incredibly unlikely case
that someone configures a resource with "last_failure" in its name)