#726 On-failure callback double execution risk

In _handle_failure_exception(), task is marked as executed AFTER callback runs. If callback raises, neither is marked. On retry, callback runs again (double refund/notification).