rearchitect error framework

[zachschuermann]

we want to be able to

1. add new errors without breaking changes all the time
2. delineate between public and private errors
3. actionable for users

TODO probably more (cc @OussamaSaoudi)

[zachschuermann]

some discussion in: #662 (comment)