Displaying error messages in the client via `__error__` tag can leak secrets

This behavior should only be enabled when in debug mode!

Also, we're passing `__error__` as the tag which React doesn't like. We should just format the whole traceback as a code-block.