Allow failed profiles to become verified if subsequently reported by osquery (#13343)

server/datastore/mysql/apple_mdm.go

@@ -1661,14 +1661,14 @@ SET
 	status = ?
 WHERE
 	host_uuid = ?
-	AND status = ?
+	AND status IN(?)
 	AND operation_type = ?
 	AND profile_identifier IN(?)`
 
 	args := []interface{}{
 		fleet.MDMAppleDeliveryVerified,
 		host.UUID,
-		fleet.MDMAppleDeliveryVerifying,
+		[]interface{}{fleet.MDMAppleDeliveryVerifying, fleet.MDMAppleDeliveryFailed},
 		fleet.MDMAppleOperationTypeInstall,
 		identifiers,
 	}

server/datastore/mysql/apple_mdm_test.go

@@ -4838,7 +4838,7 @@ func TestMDMProfileVerification(t *testing.T) {
 			{
 				name:           "FailedThenFoundExpected",
 				initialStatus:  fleet.MDMAppleDeliveryFailed,
-				expectedStatus: fleet.MDMAppleDeliveryFailed, // no change
+				expectedStatus: fleet.MDMAppleDeliveryVerified, // failed can become verified if found later
 				expectedDetail: "",
 			},
 		}
@@ -4901,7 +4901,7 @@ func TestMDMProfileVerification(t *testing.T) {
 			{
 				name:           "FailedThenFoundExpectedAndUnexpected",
 				initialStatus:  fleet.MDMAppleDeliveryFailed,
-				expectedStatus: fleet.MDMAppleDeliveryFailed, // no change
+				expectedStatus: fleet.MDMAppleDeliveryVerified, // failed can become verified if found later
 				expectedDetail: "",
 			},
 		}