fix: consume provider-platform StructuredError, map codes to operator copy

[AquiGorka]

ClickUp 86cahd1d4 — follow-up to the error-bubbling line (86c8t0zux). provider-platform now returns StructuredError { code, source?, message, details? } on non-2xx (its PlatformError wire shape {code,status,message,details}); this makes provider-console read the code and map it to operator copy, dropping string-matching / bare status / silent swallow.

Error-site inventory (converted)

• src/lib/api.ts — every dashboard/auth/bundle error response: auth challenge+verify, registerPp, listPps, deletePp, discoverCouncil, joinCouncil, getCouncilMembership, checkMembershipStatus, treasury/metrics/entities/bundle-detail/list. Each now throw await platformError(res, context); the 401 path throws a coded ConsoleError (HTTP_AUTH_003). checkMembershipStatus surfaces the error instead of silently returning PENDING.
• src/components/page.ts + src/views/home.ts — background membership checks now log the failure for the operator instead of catch {} / .catch(() => {}).
• Views render err.message, which is now the mapped copy, so no per-view changes were needed.
• Local guards (Wallet not connected, Not authenticated) left as-is (client-side preconditions, not backend errors). stellar.ts/horizon.ts are Horizon, not provider-platform — they already read Horizon's structured result_codes; left untouched (different contract).

Change

src/lib/errors.ts (new): StructuredError type + ConsoleError + operatorMessage (code → copy; unknown code → safe body message → generic) + platformError(res, context). Mirrors moonlight-pay friendlyError, adapted to operator copy. moonlight-sdk v0.11.1 exports no StructuredError type / code enum (only the contract catalog + decodeContractError), so the type + map are console-local.

Codes mapped

SEP-53 challenge verify AUTH_VR_002/003/004/005/014/015/016/017/018, ACH_VR_001, ACH_ST_003/004/007; JWT HTTP_AUTH_001-004; payload HTTP_PRO_001; bundle-read BND_008/009/011/013/014/015/016. Unknown code → body message (if a safe sentence) → generic last resort. (SOROBAN_* arrive only via a bundle's failureDetail, which provider-console's BundleDetail type doesn't include / render — out of scope here; noted.)

Tests

Mapper unit tests src/lib/errors_test.ts — 6/0 (known code → copy, unknown → safe message, unsafe → fallback/generic, isSafeSentence, platformError maps + carries code, non-JSON → context). Full deno test src/: 13/0. deno task check / lint / fmt --check / build: green.

Note: src/app-styles.css carries a deno fmt reformat (pre-existing drift) to keep the deno fmt --check src/ gate green — unrelated to the error handling.