warn at end of update job if any repos failed during pull

If make update is updating many projects, the output can be quite verbose, and it's easy to miss if one project failed its git pull without carefully scrolling through the entire wall of output.

This adds a warning at the end for any failed projects, similar to what is already done for skipped projects.