Function getStatusForAnonymousError

Map an anonymous-session error code to its HTTP status per DESIGN §3.C7. 401 invalid_client; 403 feature_not_enabled / unauthorized_client; 500 server_error / invalid_response; 400 for every other (client/request) code.