many repair actions may follow after the first has executed, but repair
actions are not modsynced to the secondary while resync is running. set
the secondary of a group to BAD once a repair action is attempted on
the primary, and set all secondaries with repairs to NEEDS-RESYNC when
all repair actions have completed.
(cherry picked from commit 4ae6ba4c55db22c5cc5ce7a6792e12bd67a29b69)