fn resolution_key_limit_failure(requested: usize) -> CliError
Preserve resource-limit failures while admitting contract-invalid key facts.