transfer: point --help and 401 at `sol observer create`
Ramon's install demo failed because `sol transfer send` was given a
journal-source API key, but the command actually requires an observer
API key from the RECEIVING host. The two key types are shape-
indistinguishable, so there is no reliable pre-flight detection path;
this is a pure discoverability fix.
Update the five transfer surfaces that need to teach the right command:
the module docstring, the send subparser description, the `--key` help,
and the two 401 auth failure messages. Keep the 403 wording unchanged,
preserve the `Authentication failed` prefix for existing tests, and use a
shared AUTH_INVALID_OBSERVER_KEY constant so both 401 surfaces stay
identical.
Co-Authored-By: OpenAI Codex <codex@openai.com>