Error subclass for user-facing payment validation errors (e.g. invalid phone number). These propagate to the user through the guarded runners.