Sub-ticket of PLUTO-95 Raw error text in HTTP response/UI — sanitize + log eventId (5 sites: log-404:45, cron/drain-email-outbox:34, api/image/[id]:76, administrar-actions:1527/1648). Return generic message + logged eventId, never raw err.name/message/String(err). From P0 cross-team error-handling audit, rubric #5. · pluto