Error codes

Every non-trivial error the API emits has a stable machine-readable code so your SDK can branch on it without string-matching English messages. The HTTP status is also part of the contract — we never change status for an existing code.