Add destructive confirmation and import guidance

apps/admin-api/src/error.rs

@@ -400,6 +400,9 @@ fn runtime_test_failure_code(error: &RuntimeError) -> &'static str {
         RuntimeError::UnsupportedProtocol { .. } => "runtime_protocol_error",
         RuntimeError::ConcurrencyLimitExceeded { .. } => "runtime_overloaded",
         RuntimeError::InvalidPreparedRequest { .. } => "runtime_request_error",
+        RuntimeError::ConfirmationRequired { .. } => "runtime_confirmation_required",
+        RuntimeError::InvalidConfirmationToken { .. } => "runtime_confirmation_error",
+        RuntimeError::ConfirmationStoreUnavailable { .. } => "runtime_confirmation_unavailable",
         RuntimeError::UnsupportedExecutionMode { .. } => "runtime_streaming_mode_error",
         RuntimeError::MissingAuthProfile { .. } => "runtime_auth_profile_error",
         RuntimeError::MissingSecret { .. } | RuntimeError::MissingSecretVersion { .. } => {
@@ -416,6 +419,20 @@ pub fn runtime_error_context(error: &RuntimeError) -> Option<Value> {
             "field": field,
             "reason": reason,
         })),
+        RuntimeError::ConfirmationRequired {
+            confirmation_token,
+            expires_in_ms,
+            safety_class,
+            ..
+        } => Some(json!({
+            "confirmation_token": confirmation_token,
+            "expires_in_ms": expires_in_ms,
+            "safety_class": safety_class,
+        })),
+        RuntimeError::InvalidConfirmationToken { operation_id }
+        | RuntimeError::ConfirmationStoreUnavailable { operation_id } => Some(json!({
+            "operation_id": operation_id,
+        })),
         RuntimeError::InvalidAuthSecretValue { secret_id, reason } => Some(json!({
             "secret_id": secret_id,
             "reason": reason,