Push INACTIVE to the mirror before revoking the key that push needs, and stop two steps reporting success they did not have

System_Essentials/rsync_stop.sh

@@ -565,4 +565,14 @@ if [[ "$DRY_RUN" == false ]]; then
         notify "Rsync stopped on $(hostname) ($MY_ID) — mode: $MODE${CONTAINERS_RESTARTED:+ — recovered: ${CONTAINERS_RESTARTED[*]}}" \
             "Rsync Stop" "warning"
     fi
-fi
+fi
+
+# Explicit, because callers branch on it. Without this the script's status is whatever the last
+# thing to run happened to return — a notify, or a test that evaluated false — and
+# partnership_offboard.sh does `rsync_stop.sh || STEP_STOP_OK=false`. That is how an offboard
+# printed "Rsync stopped ✅" in the log and "Step 1 — Stop rsync: ❌" in its own summary.
+#
+# Only a container that failed to come back is a failure: killing rsync is the job, and finding
+# nothing to kill is a success, not an error.
+[[ ${#CONTAINERS_FAILED[@]} -gt 0 ]] && exit 1
+exit 0