[LOW] Embedding API error response body leaked in error messages and CRD status

[pradeepto]

Description

pkg/embedding/client.go:129

return nil, fmt.Errorf("API returned status %d: %s", resp.StatusCode, string(body))

The full error response body from the embedding API is included in the error message. This error propagates up through UpdateStatus() and gets stored in the CRD status conditions visible to anyone who can kubectl get the CR.

Impact

Internal API error details from the embedding service are exposed through the Kubernetes API.

Fix

Log the full response body server-side for debugging but return a sanitized error message.