Gracefully handle failures in splits

[keith-turner]

Currently is a split operation fails it may leave an operation id set on the tablet which will leave the tablet in an unusable state. This is left set on purpose as its not known if the tablet is in a good state. Need to analyze the split code to see if it could be made to rollback failures.