fix(server): propagate _all_ API errors

1. always pass an `on_error` callback to `curl`
2. replace callback instance methods with Promises for consistency and
brevity

rarely relevant in these code paths, but feels good to have them
covered. confidence!

need error type in the Promise eventually... (a Result type essentially)