auto_commit is not failure safe

When processing an entry fails auto_commit will mark message as processed including the failed one.

Simple example:

```python
async for msg in consumer:
1/0
```
Does consumes one message while it should have consumed none.

One possible solution would be to mark a message for auto_commit on `__anext__` on the iteration after the respective item.