fix(trust-graph): return explicit score lookup errors

[EfeDurmaz16]

Summary

• resolve score and capability score DIDs before cache writes
• return 404 for identities missing from discovery and 503 for discovery outages
• document the score lookup error contract in the trust-graph OpenAPI spec

Verification

• pnpm --filter @fides/trust-graph test
• pnpm --filter @fides/trust-graph lint
• pnpm build
• git diff --check

[chatgpt-codex-connector]

💡 Codex Review

fides/services/trust-graph/src/services/trust-service.ts

Lines 316 to 320 in 602577c

	} else if (response.status >= 500) {
	throw new TrustError(`Discovery service unavailable while resolving identity: ${did}`)
	}
	} catch (error) {
	if (error instanceof TrustError) throw error

Count HTTP 5xx responses in the breaker

When discovery responds with HTTP 5xx, line 317 throws a TrustError, but the catch immediately rethrows TrustError before incrementing failureCount, so repeated HTTP outages never open the circuit breaker; only network/abort exceptions do. This defeats the breaker for the common unavailable-service response path that this change now maps to 503.

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".