fix: translate resource-call errors into ApiError

[bufo24]

Problem

The payments README documents that resource calls throw the SDK's typed errors:

try {
  await payments.wallets.list({ environmentId });
} catch (err) {
  if (err instanceof ApiError) { ... }
}

But Environments, Wallets, and Transactions call the generated client via getSdk(graphqlClient) directly, bypassing AmbossClient.gqlRequest (which is where translateError runs). So these calls actually throw raw graphql-request ClientErrors — err instanceof ApiError is always false, and the documented error contract is broken.

Fix

Added translateSdkErrors, an SdkFunctionWrapper that runs AmbossClient.translateError on any thrown error, and passed it to every getSdk(...) call. Translation happens once, at the generated-client boundary, so all current and future resource methods are covered.

this.#sdk = getSdk(graphqlClient, translateSdkErrors);

Tests

Added sdkErrors.test.ts: a resource call whose fetch returns a GraphQL error now rejects with ApiError (message preserved), not a raw ClientError.

Verified: typecheck ✓, build ✓, format ✓, 28/28 payments tests ✓.

Note

Touches packages/payments, so this cuts the next release — @ambosstech/payments@0.1.1 (its first published bump) — which is what exercises the corrected publish pipeline.