Add `--retcode-passthrough` to salt-call so the build fails when there is an error running `highstate`