gitlab-ci: Report unexpected passes as failures

@krh asked if CI would do this, and I thought it was reasonable behavior, so here goes:

If people fix bugs without updating the expected-fails list, then we end up with a lack of coverage of those failures in the future, and some day down the line another developer ends up trying to figure out if the bug was actually fixed or their environment is just failing to reproduce it.