refactor(acp): construct session-busy errors via a RequestError.sessionBusy factory

Review finding (codex P1, seconded by bradhallett): keep the third ACP
application code beside authRequired/-32000 and resourceNotFound/-32002 on
the shared factories instead of a local constant, per the central-utilities
rule. Wire shape is unchanged.