data holds the payload; pagination appears only on paged lists; on failures errors is populated and meta.status becomes FAILURE.
Gateway-level auth errors (401 / 403) are the exception: they have no body at all. Only errors from the services carry the
errors envelope.