fn resolution_read_error(error: DbError) -> CliError
Lift database admission refusals into the shared CLI/MCP indexing error family.