Error reference

Every error response follows `{ error: string, message: string, ... }`. Validation errors include a `details` array with the failing field.

4xx errors are tenant-fixable; 5xx errors are TrustVerify-side and trigger Sentry alerts on our side.