#955 ALL_OF JoinOperator lets the workflow continue when join_satisfied=false

EARS: If an ALL_OF join has a failed or missing branch, then the engine shall not run the join's dependents and shall fail or hold the run per the declared join semantics. Found by #944 agent on golden_deterministic_v2 phase4_sync_gate_join: join returned join_satisfied=false and dependents ran. Decide intended semantics first.