Avoid connecting after Bluetooth pair failures

[Brams-s]

Summary

• Only trust and connect a Bluetooth device after bluetoothctl pair succeeds.
• Cover successful pairing and ensure a failed pairing does not leave an unpaired device trusted or connected.

Testing

• bash test/shell.d/bluetooth-test.sh
• ./test/cli
• bin/omarchy commands --check
• Full shell suite: 255/256 test files pass; the unrelated test/shell.d/launch-about-test.sh fails its existing roomy-window animation expectation.

[duketopceo]

Verified on MacBookPro18,1 (M1 Pro, aarch64, BCM4387 / hci_bcm4377), Omarchy 4.0.3-1:

• bluetooth-test.sh: all pass, including the 6 new pair-failure cases (pair attempted, no trust, no connect on failure).
• Live: omarchy-bluetooth-device pair 00:00:00:00:00:00 on the real adapter exits cleanly in ~14ms — pair returns "Device not available" (exit 1) and the new if correctly skips trust/connect. Under the old || true chain both would still have fired against a device with no pairing record, which is exactly the half-paired "connected but no A2DP sink" state this fixes.

LGTM from a test standpoint.