Unchecked error codepaths in `Update_until`

[aaraney]

Update_until calls Update in a loop and later if a partial timestep update is requested. In both cases, Update could return BMI_FAILURE but that error path is not handled.

https://github.com/NOAA-OWP/cfe/blob/a349a953ef239ae7470a8365cf614283d7e6ca80/src/bmi_cfe.c#L1604 https://github.com/NOAA-OWP/cfe/blob/a349a953ef239ae7470a8365cf614283d7e6ca80/src/bmi_cfe.c#L1614