Error types for the auth crate.
Backends and modules return Error uniformly so callers (engine HTTP handlers in phase 8) can map a single enum to status codes.
Error