pub const FORBIDDEN: &str = "e.p.msg.forbidden";Expand description
Workspace-specific extension to the affinidi taxonomy.
Distinguishes “permission denied” (caller authenticated but
lacks the role / context / sender-identity) from
unauthorized (auth failed). Without this, the SDK
collapses both into VtaError::Auth and the CLI prints
“Token may be expired” — which is misleading when the real
problem is a privilege-laundering rejection or an ACL miss.