style: gofmt normalization — no logic changes

gofmt -w across the controller tree (46 files) so gofmt -l is empty — disarms the
formatting landmine where a targeted edit + accidental gofmt -w swept ~46 unrelated
files. Pure formatting: whitespace + gofmt's optional-semicolon removal in reflowed
inline closures. One doc comment reworded ('' -> 'the empty string') to avoid gofmt's
Go-1.19 doc-comment typographic substitition ('' -> curly quote) muddying its meaning.
No build/vet/test behavior change.

controller/internal/backup/recovery_unit.go

@@ -18,10 +18,11 @@ import (
 // RecoveryManifest describes an app's self-contained, SECRET-FREE recovery unit (Phase 2).
 //
 // The unit on a drive is `<nsRoot>/backups/primary/<app>/` and contains:
-//   compose/      docker-compose.yml + .felhom.yml + a SECRET-STRIPPED app.yaml
-//   db-dumps/     app-consistent DB dump(s)        (written by the dump flow)
-//   volume-dumps/ named-volume tars                (written by the dump flow)
-//   manifest.json this file
+//
+//	compose/      docker-compose.yml + .felhom.yml + a SECRET-STRIPPED app.yaml
+//	db-dumps/     app-consistent DB dump(s)        (written by the dump flow)
+//	volume-dumps/ named-volume tars                (written by the dump flow)
+//	manifest.json this file
 //
 // The unit holds NO secret values, NO data-encrypting keys, and NOT the Docker image — only the
 // pinned image tag(s) (re-pulled on restore) and the NAMES of the secret/data-key env vars. The