File chooser errors are silent

Found during #139's mask audit: a failing file-chooser portal call reports nothing to the pilot. Not fixed there because a portal that reports dismissal as an error rather than Cancelled would produce an alert on every cancelled dialog - the fix needs to distinguish the two empirically per backend. Raw-error rule applies when built.