fn bearer_error(err: BearerTokenError) -> ControllerErrorExpand description
The response to a token resolve_bearer_token rejected.
A database failure is a 500, never a 401: langs turns a 401 into
refresh-then-DELETE-credentials, so collapsing a transient DB blip into 401 would force-log-out
every user for the duration of the outage.