Function project_authorization_error 

pub fn project_authorization_error(error: &AuthServiceError) -> LayerFailureKind

Classifies an authorization failure for the fail-closed layered contract.

This classification carries no underlying error text. Callers must use the fixed denial output from rocketmq-security-api rather than returning the source error to a peer.