Add required configuration for publish checks

[janbro]

Adds a required config option to publish checks that controls whether check errors block publishing. When required = false, errors are logged but publishing continues.

• Returns partial secret scan results on timeout (if findings exist)
• Auto-includes scans with errored check results when filtering by ERRORED status
• Shows error badges in admin UI for checks that errored