refactor(services_live): replace string-sniffed error dispatch with typed exception subclasses

ServiceNotFoundError (→ 404) and ServiceConflictError (→ 409) replace the
"not found" / "already on" / "not on" substring checks in _map_mutation_error;
base ServiceMutationError still maps to 422. Fixes three pre-existing test
status-code assertions (201 vs 200 on POST endpoints).

tests/api/deckies/test_service_config_api.py

@@ -9,7 +9,7 @@ import httpx
 import pytest
 
 from decnet.engine import services_live
-from decnet.engine.services_live import ServiceMutationError
+from decnet.engine.services_live import ServiceConflictError, ServiceMutationError
 from decnet.services.base import ConfigValidationError
 
 _FLEET = "/api/v1/deckies"
@@ -98,7 +98,7 @@ async def test_fleet_apply_config_triggers_recreate(
         json={"config": {"password": "hunter2"}},
         headers=_hdr(auth_token),
     )
-    assert res.status_code == 200
+    assert res.status_code == 201
     assert res.json()["recreated"] is True
     assert seen["apply"] is True
 
@@ -127,7 +127,7 @@ async def test_put_config_409_when_service_not_on_decky(
     client: httpx.AsyncClient, auth_token: str, monkeypatch
 ) -> None:
     async def _fake(*a, **kw):
-        raise ServiceMutationError("service 'ssh' not on decky 'web1'")
+        raise ServiceConflictError("service 'ssh' not on decky 'web1'")
 
     monkeypatch.setattr(
         "decnet.web.router.deckies.api_services.update_service_config", _fake,

tests/api/deckies/test_services_api.py

@@ -14,7 +14,11 @@ from __future__ import annotations
 import httpx
 import pytest
 
-from decnet.engine.services_live import ServiceMutationError
+from decnet.engine.services_live import (
+    ServiceConflictError,
+    ServiceMutationError,
+    ServiceNotFoundError,
+)
 from decnet.web.router.deckies import api_services
 
 
@@ -43,7 +47,7 @@ async def test_fleet_add_service_returns_post_mutation_list(
         json={"name": "ssh"},
         headers=_hdr(auth_token),
     )
-    assert res.status_code == 200, res.text
+    assert res.status_code == 201, res.text
     body = res.json()
     assert body["decky_name"] == "web1"
     assert body["services"] == ["http", "ssh"]
@@ -70,7 +74,7 @@ async def test_fleet_add_service_409_already_present(
     client: httpx.AsyncClient, auth_token: str, monkeypatch
 ) -> None:
     async def _fake_add(*a, **kw):
-        raise ServiceMutationError("service 'ssh' already on decky 'web1'")
+        raise ServiceConflictError("service 'ssh' already on decky 'web1'")
     monkeypatch.setattr(api_services, "add_service", _fake_add)
     res = await client.post(
         f"{_FLEET_BASE}/web1/services",
@@ -100,7 +104,7 @@ async def test_fleet_remove_service_404_decky_missing(
     client: httpx.AsyncClient, auth_token: str, monkeypatch
 ) -> None:
     async def _fake_remove(*a, **kw):
-        raise ServiceMutationError("fleet decky 'ghost' not found")
+        raise ServiceNotFoundError("fleet decky 'ghost' not found")
     monkeypatch.setattr(api_services, "remove_service", _fake_remove)
     res = await client.delete(
         f"{_FLEET_BASE}/ghost/services/ssh",
@@ -126,7 +130,7 @@ async def test_topology_add_service_returns_post_mutation_list(
         json={"name": "ssh"},
         headers=_hdr(auth_token),
     )
-    assert res.status_code == 200, res.text
+    assert res.status_code == 201, res.text
     body = res.json()
     assert body["decky_name"] == "web1"
     assert body["topology_id"] == "abc123"