Function denial_error 

pub fn denial_error(id: Option<&Value>, code: DenialCode, reason: &str) -> Value

authorization_error plus the machine-readable denial code in error.data.code, so an agent can branch on the code without parsing the reason text.