Add Vault Permission Error Explainer

[edehvictor]

Summary

Improve user-facing messaging for vault permission and authorization errors.

Scope

• Detect common permission failures.
• Explain likely causes and next actions.
• Avoid exposing raw low-level error strings.

Acceptance Criteria

• Permission failures show a useful explanation.
• Technical details remain available only where appropriate for debugging.