test(api): cover the transport-error path (HTTP.Do failure)

[LukasWodka]

The api transport-error harness from the coverage audit — an errRoundTripper that fails every request, simulating the most common real-world API failure the httptest tests can't reach (connection refused / DNS / reset, i.e. HTTP.Do itself erroring). Previously untested in get / bodyRequest.

• get wraps the transport error (errors.Is).
• bodyRequest surfaces it.
• an exported call (WhoAmI) fails on a dead transport rather than reading a zero-value identity as success.

make ci green. No production changes.

🤖 Generated with Claude Code

---

Note

Low Risk
Test-only addition with no runtime or production behavior changes.

Overview
Adds internal/api/transport_test.go with an errRoundTripper stub so tests can force HTTP.Do to fail (connection refused / DNS / reset) without a real server—paths that httptest-based tests do not cover.

TestTransportError asserts that get wraps the transport error (checkable via errors.Is), bodyRequest returns an error, and WhoAmI fails instead of treating a zero Identity as success when the transport is down.

No production code changes.

^{Reviewed by Cursor Bugbot for commit f1b129d. Bugbot is set up for automated code reviews on this repo. Configure here.}

[LukasWodka]

bugbot run

[cursor]

✅ Bugbot reviewed your changes and found no new issues!

Comment @cursor review or bugbot run to trigger another review on this PR

^{Reviewed by Cursor Bugbot for commit f1b129d. Configure here.}

[saadqbal]

LGTM 👍 The errRoundTripper is the right way to hit the HTTP.Do failure branch the httptest tests can't reach, and get/bodyRequest both wrap with %w so the errors.Is check holds through the url.Error layer.