Move ErrorList to util

Part of ip-per-service
Do you have a suggestion that prevents an empty ErrorList from being interpreted as a non-nil error?