Transfer errors leak raw service codes to members

[ajaynarang]

When the real payments API is wired, its legacy error shape ({code, message}) would surface codes like DAILY_LIMIT_EXCEEDED verbatim. Once the estate adopts the §4.6 envelope we should map error.code to member-friendly copy in one place.