Better error responses on Brands and Protected Assets APIs

The Brands API and Protected Assets API now return structured error responses (with a clear status code and message body) instead of generic 500s when a request fails validation or hits an internal exception.