ci: fail pipeline for users who got access to restricted traces

Broken trace is easier to ignore. Make it a bit harder.

Acked-by: Rob Clark <robdclark@chromium.org>
Signed-off-by: David Heidelberg <david.heidelberg@collabora.com>
Part-of: <https://gitlab.freedesktop.org/mesa/mesa/-/merge_requests/23674>

.gitlab-ci/test-source-dep.yml

@@ -38,6 +38,9 @@
     - if: '($GITLAB_USER_LOGIN !~ "/^(robclark|anholt|flto|cwabbott0|Danil|tomeu|okias|gallo|kwg|majanes|llanderwelin|zmike|vigneshraman)$/") &&
            ($GITLAB_USER_LOGIN != "marge-bot" || $CI_COMMIT_BRANCH)'
       when: never
+    - if: '($GITLAB_USER_LOGIN != "marge-bot" || $CI_COMMIT_BRANCH)' # so it's invoked by user
+      allow_failure: false
+    - allow_failure: true
 
 # Mesa core source file dependencies that may impact any test job
 # ---------------------------------------------------------------

src/freedreno/ci/gitlab-ci.yml

@@ -269,7 +269,6 @@ a630-traces-restricted:
   variables:
     PIGLIT_TRACES_FILE: restricted-traces-freedreno.yml
     PIGLIT_REPLAY_EXTRA_ARGS: "--download-caching-proxy-url=http://10.42.0.1:8888/cache/?uri= --db-path ${CI_PROJECT_DIR}/replayer-db/ --minio_bucket=${S3_TRACIE_PRIVATE_BUCKET} --jwt-file=${S3_JWT_FILE}"
-  allow_failure: true
 
 a630-traces-performance:
   extends:

src/gallium/drivers/zink/ci/gitlab-ci.yml

@@ -79,7 +79,6 @@ zink-anv-tgl-traces-restricted:
   variables:
     PIGLIT_TRACES_FILE: traces-zink-restricted.yml
     PIGLIT_REPLAY_EXTRA_ARGS: --db-path ${CI_PROJECT_DIR}/replayer-db/ --minio_bucket=${S3_TRACIE_PRIVATE_BUCKET} --jwt-file=${S3_JWT_FILE}
-  allow_failure: true
 
 zink-tu-a618:
   extends: