refactor(server)!: sanitize error messages to avoid leaking resource and permission details

server/test/medium/responses.ts

@@ -7,9 +7,9 @@ export const errorDto = {
   forbidden: {
     message: expect.any(String),
   },
-  missingPermission: (permission: string) => ({
-    message: `Missing required permission: ${permission}`,
-  }),
+  missingPermission: {
+    message: 'Access denied',
+  },
   wrongPassword: {
     message: 'Wrong password',
   },
@@ -26,7 +26,7 @@ export const errorDto = {
     message: message ?? expect.anything(),
   }),
   noPermission: {
-    message: expect.stringContaining('Not found or no'),
+    message: 'Access denied',
   },
   incorrectLogin: {
     message: 'Incorrect email or password',