Map cancel campaign terminal errors to invalid

Return GraphQL invalid when cancel hits completed or cancelled
campaign status sentinels from the service layer.

Signed-off-by: Cursor Agent <cursoragent@cursor.com>

Co-authored-by: Bryan FRIMIN <bryan@frimin.fr>

pkg/server/api/console/v1/access_review_campaign_resolvers.go

@@ -861,6 +861,10 @@ func (r *mutationResolver) CancelAccessReviewCampaign(ctx context.Context, input
 
 	campaign, err := r.accessReview.CancelCampaign(ctx, scope, input.AccessReviewCampaignID)
 	if err != nil {
+		if errorx.AnyOf(err, accessreview.ErrCampaignCompleted, accessreview.ErrCampaignCancelled) {
+			return nil, gqlutils.Invalid(ctx, err)
+		}
+
 		r.logger.ErrorCtx(ctx, "cannot cancel access review campaign", log.Error(err))
 
 		return nil, gqlutils.Internal(ctx)