style: gofmt normalization — no logic changes

gofmt -w across the controller tree (46 files) so gofmt -l is empty — disarms the
formatting landmine where a targeted edit + accidental gofmt -w swept ~46 unrelated
files. Pure formatting: whitespace + gofmt's optional-semicolon removal in reflowed
inline closures. One doc comment reworded ('' -> 'the empty string') to avoid gofmt's
Go-1.19 doc-comment typographic substitition ('' -> curly quote) muddying its meaning.
No build/vet/test behavior change.

controller/internal/report/escrow_confirm_test.go

@@ -86,9 +86,9 @@ func TestEscrowConfirm_StaleBlobStaysPending(t *testing.T) {
 // Scenario C — no status / hash-less blob / no local password file → stay pending SILENTLY.
 func TestEscrowConfirm_SilentPendingCases(t *testing.T) {
 	h := newConfirmer(t)
-	h.c.Reconcile(nil) // no escrow row on the hub
-	h.c.Reconcile(&EscrowStatus{IdentityBlobPresent: true})                            // hash NULL (legacy blob)
-	h.c.Reconcile(&EscrowStatus{IdentityBlobPresent: false, ResticPwSHA256: hubHash})  // hash without identity blob — fail-closed
+	h.c.Reconcile(nil)                                                                // no escrow row on the hub
+	h.c.Reconcile(&EscrowStatus{IdentityBlobPresent: true})                           // hash NULL (legacy blob)
+	h.c.Reconcile(&EscrowStatus{IdentityBlobPresent: false, ResticPwSHA256: hubHash}) // hash without identity blob — fail-closed
 	h.localOK = false
 	h.c.Reconcile(matchStatus(hubHash)) // no local password file
 	if h.flips != 0 || h.logbuf.Len() != 0 {