Refactor error handling in IAM and CMS crates

- Introduced `RepositoryError` and `ServiceError` enums in both IAM and CMS domains for better error management.
- Updated domain traits and services to return specific error types instead of `anyhow::Result`.
- Enhanced session and OAuth repository implementations to handle errors more explicitly.
- Refactored session service methods to return `Result<T, ServiceError>` for improved error handling.
- Updated HTTP handlers to utilize the new error types.
- Modified password hashing functions to run in a blocking context using `tokio::task::spawn_blocking`.
- Added tests for new error handling mechanisms and async password functions.

crates/zesdex-iam/src/domain/repository.rs

@@ -11,22 +11,23 @@
 //! - [`OAuthRepository`] — persist/load OAuth tokens
 use std::path::Path;
 
+use crate::domain::error::RepositoryError;
 use crate::domain::oauth::OAuthToken;
 use crate::domain::session::Session;
 
 /// Repository for loading, saving, listing, and deleting sessions.
 pub trait SessionRepository {
     /// List all loadable sessions under `<base_dir>/sessions/`.
-    fn list_sessions(&self, base_dir: &Path) -> anyhow::Result<Vec<Session>>;
+    fn list_sessions(&self, base_dir: &Path) -> Result<Vec<Session>, RepositoryError>;
 
     /// Load a single session by id.
-    fn load_session(&self, base_dir: &Path, id: &str) -> anyhow::Result<Session>;
+    fn load_session(&self, base_dir: &Path, id: &str) -> Result<Session, RepositoryError>;
 
     /// Save a session's metadata to disk.
-    fn save_session(&self, base_dir: &Path, session: &Session) -> anyhow::Result<()>;
+    fn save_session(&self, base_dir: &Path, session: &Session) -> Result<(), RepositoryError>;
 
     /// Delete a session directory and all its contents.
-    fn delete_session(&self, base_dir: &Path, id: &str) -> anyhow::Result<()>;
+    fn delete_session(&self, base_dir: &Path, id: &str) -> Result<(), RepositoryError>;
 }
 
 /// Repository for per-session PID-file advisory locks.
@@ -34,10 +35,10 @@ pub trait SessionLockRepository {
     /// Try to acquire the lock for a session directory.
     /// Returns `true` if the lock was acquired, `false` if another live
     /// process holds it.
-    fn try_lock(&self, session_dir: &Path) -> anyhow::Result<bool>;
+    fn try_lock(&self, session_dir: &Path) -> Result<bool, RepositoryError>;
 
     /// Release the lock by removing the lock file.
-    fn unlock(&self, session_dir: &Path) -> anyhow::Result<()>;
+    fn unlock(&self, session_dir: &Path) -> Result<(), RepositoryError>;
 
     /// Check whether a process with the given PID is alive.
     fn is_alive(&self, pid: u32) -> bool;
@@ -46,9 +47,9 @@ pub trait SessionLockRepository {
 /// Repository for persisting and loading OAuth tokens.
 pub trait OAuthRepository {
     /// Persist an OAuth token to a JSON file.
-    fn save_token(&self, path: &Path, token: &OAuthToken) -> anyhow::Result<()>;
+    fn save_token(&self, path: &Path, token: &OAuthToken) -> Result<(), RepositoryError>;
 
     /// Load an OAuth token from a JSON file, returning `None` if the file
     /// does not exist.
-    fn load_token(&self, path: &Path) -> anyhow::Result<Option<OAuthToken>>;
+    fn load_token(&self, path: &Path) -> Result<Option<OAuthToken>, RepositoryError>;
 }