refactor(web/api): errCode + errMessage helpers; 41 sites migrated (W1)

web/src/routes/reset-password/[token]/+page.svelte

@@ -3,6 +3,7 @@
   import { page } from '$app/state';
   import { pageTitle } from '$lib/branding';
   import { resetPassword } from '$lib/auth/store.svelte';
+  import { errCode } from '$lib/api/errors';
 
   let newPassword = $state('');
   let confirmPassword = $state('');
@@ -27,13 +28,13 @@
       await resetPassword(token, newPassword);
       await goto('/login?reset=ok', { replaceState: true });
     } catch (e: unknown) {
-      const code = (e as { code?: string })?.code;
+      const code = errCode(e);
       if (code === 'invalid_token') {
         error = 'This reset link is invalid, expired, or already used. Request a new one.';
       } else if (code === 'password_too_short') {
         error = 'Password must be at least 8 characters.';
       } else {
-        error = `Reset failed: ${code ?? 'unknown'}`;
+        error = `Reset failed: ${code}`;
       }
     } finally {
       submitting = false;