RepositoryUpgrade.copy() should optionally continue on errors.

Currently RepositoryUpgrade.copy() fails on the first error. In practice this is very inconvenient, because any minor inconsistency in the source repository may cause the upgrade to fail.
An option to make best-effort copies is needed.