- 404/422 error responses now build their {success, message, data}
  envelope from config('mock-api.default_error_response') instead of
  a hardcoded array in the controller
- message is always overwritten per error at request time; validation
  failures still add an "errors" key on top