fix(server): translate policy capability rejections into readable errors

Capability rejections surfaced their internal diagnostic string, so a
checkpoint revert on a provider without rollback support showed 'pi
cannot satisfy rollback_snapshot for command <uuid>: rollback must
return a providerInstanceId thread snapshot'. userFacingDispatchErrorMessage
now renders known policy rejections as provider-named prose ('Pi did not
report its rewound conversation state, so the checkpoint was not
restored.') and keeps the diagnostic form for logs and unknown codes.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
f0c70b6f6eWout Stiens committed on 9/1/2026, 5:42:54 AMparent244f229
2 files changedLine totals unavailable