Refactor: crmd/pengine: implement on-fail=ignore without allow-fail

This reimplementation avoids the need to change any pengine regression tests,
and deprecates the XML_ATTR_TE_ALLOWFAIL operation attribute and the
corresponding pe_action_failure_is_fatal value of pe_action_flags
(retaining them for backward API compatibility).