refac: DELETE /v1/user/{id}?expected_role_id=N, user.remove audit event, 409 target_role_not_found, GetAll returns its error, Own-scope visibility filter moved into repos, JSON tags removed from use-case types

internal/domain/role/roleDomain.go

@@ -16,18 +16,19 @@ var (
 
 	ErrMissingPermission = errors.New("missing permission")
 
-	ErrRoleHasMembers     = errors.New("role still has members")
-	ErrRoleNameTaken      = errors.New("role name already used")
-	ErrRoleLocked         = errors.New("role is locked")
-	ErrBuiltInRole        = errors.New("role is built in")
-	ErrBuiltInName        = errors.New("built-in role cannot be renamed")
-	ErrOwnRole            = errors.New("cannot change the role you hold")
-	ErrInvalidRoleName    = errors.New("invalid role name")
-	ErrUnknownContentType = errors.New("unknown content type")
-	ErrNotBuiltIn         = errors.New("role is not built in")
-	ErrInvalidReassign    = errors.New("invalid reassign target")
-	ErrEscalation         = errors.New("grants more than the caller holds")
-	ErrUnknownRole        = errors.New("unknown role")
+	ErrRoleHasMembers         = errors.New("role still has members")
+	ErrRoleNameTaken          = errors.New("role name already used")
+	ErrRoleLocked             = errors.New("role is locked")
+	ErrBuiltInRole            = errors.New("role is built in")
+	ErrBuiltInName            = errors.New("built-in role cannot be renamed")
+	ErrOwnRole                = errors.New("cannot change the role you hold")
+	ErrInvalidRoleName        = errors.New("invalid role name")
+	ErrUnknownContentType     = errors.New("unknown content type")
+	ErrNotBuiltIn             = errors.New("role is not built in")
+	ErrInvalidReassign        = errors.New("invalid reassign target")
+	ErrReassignTargetNotFound = errors.New("reassign target not found")
+	ErrEscalation             = errors.New("grants more than the caller holds")
+	ErrUnknownRole            = errors.New("unknown role")
 )
 
 type Scope string