chore: fix windows compat build silently failing (#1538)

The Windows compat build has been silently failing for a while due to [the twine issue](aws/jsii#4554) in jsii-pacmak.

Fixing the build, by upgrading the pacmak version.

Fixing the silent failure by adding a meta job that we can add a branch protection for.

projenrc/rosetta.ts

@@ -32,7 +32,7 @@ export class RosettaPeerDependency extends Component {
     project.addDevDeps(constraint);
     project.addPeerDeps(constraint);
 
-    project.github?.tryFindWorkflow('build')?.addJob('rosetta-compat', {
+    project.github?.tryFindWorkflow('build')?.addJob('rosetta-matrix', {
       runsOn: ['${{ matrix.os }}'],
       permissions: {},
       env: {
@@ -84,6 +84,26 @@ export class RosettaPeerDependency extends Component {
         run: `test $(npx ${JSII_ROSETTA} --version) = "\${{ matrix.rosetta }}"`,
       }],
     });
+    project.github?.tryFindWorkflow('build')?.addJob('rosetta-compat', {
+      // This is a simple "join target" to simplify branch protection rules.
+      env: { CI: 'true' },
+      name: 'Rosetta Compat Tests',
+      needs: ['rosetta-matrix'],
+      permissions: {},
+      runsOn: ['ubuntu-latest'],
+      if: 'always()',
+      steps: [
+        {
+          name: 'Tests result',
+          run: 'echo ${{needs.rosetta-matrix.result}}',
+        },
+        {
+          if: "${{ needs.rosetta-matrix.result != 'success' }}",
+          name: 'Set status based on matrix build',
+          run: 'exit 1',
+        },
+      ],
+    });
   }
 
   private calculateVersionConstraint(versions: RosettaPeerDependencyOptions['supportedVersions']): string {