fn identity_fact_budget_failure_for_limit( limit: u64, retained_bytes: u64, ) -> CliError
Return the typed graph-work limit reached before retaining identity state.