refactor(server): keep telemetry identity errors private - #10032

Eligibility
This is a narrowly scoped encapsulation refactor: two internal error classes are no longer exported, while their runtime behavior and all production identity-handling paths remain unchanged. The removed test only covered direct construction of those classes, and the remaining tests continue to cover actual fallback and logging behavior.

Notes:
No code owners found in target merge base eced382