Move validation errors into a pkg

This is a precursor to fixing my other PR about error lists - That one is on hold until this or something like it goes in.

This makes ErrorList a public type, but does not implement the error interface on it (because I think we want an empty list to not be an error).  ErrorList.ToError() produces an error or nil if the list is empty.  I put it under api/errors, because that is what it is used for, and the Make* functions are sort of validation-centric.
Really?  Why the inconsistency?  I see no reason to ever use var inside a function, when := can work.  Is this an official ruling (i.e. citation needed) or advice you picked up somewhere?  we're certainly not consistent in the codebase..