Enforce passing tests by default
Currently test failures are not fatal for CI jobs unless opted in. That's because there are a number of repos where test are failing. It's easy to forget that though.
We should aim for this this to be the other way around. Enforce them by default and opt out in the (hopefully increasingly few) cases where it's needed.