hub: gofmt -w on 22 files, formatting only, no behaviour change (R-1160)

hub/internal/api/managed_floor_ack_test.go

@@ -13,7 +13,7 @@ import (
 // report handler to the ungated EffectiveMinControllerVersion → the held case leaks the floor.
 func TestReportACK_ManagedFloorHold(t *testing.T) {
 	h, st, _ := newTestHandler(t)
-	st.SetDefaultMinControllerVersion("0.113.0")                                                  // controller floor
+	st.SetDefaultMinControllerVersion("0.113.0")                                                     // controller floor
 	_ = st.SetArtifactManifest(store.ArtifactManifest{GoldenVersion: "0.113.0", MinAgent: "0.81.0"}) // coupled golden
 	if err := st.SaveCustomerConfig(&store.CustomerConfig{CustomerID: "c", RetrievalPassword: "pw", APIKey: "k", ConfigJSON: "{}"}); err != nil {
 		t.Fatal(err)

hub/internal/api/offsite_test.go

@@ -68,7 +68,9 @@ func (f *fakeKeySvc) ConfirmKey(_ context.Context, _ string, fp string) (int, er
 func (f *fakeKeySvc) OpenWindowFor(context.Context, string, int) (offsitekeys.WindowGrant, error) {
 	return offsitekeys.WindowGrant{Granted: false, Reason: "not due"}, f.err
 }
-func (f *fakeKeySvc) CloseWindowFor(context.Context, string, offsitekeys.WindowResult) error { return f.err }
+func (f *fakeKeySvc) CloseWindowFor(context.Context, string, offsitekeys.WindowResult) error {
+	return f.err
+}
 func (f *fakeKeySvc) RequestAbandon(context.Context, string, string) (offsitekeys.AbandonStatus, error) {
 	return offsitekeys.AbandonStatus{State: "pending"}, f.err
 }

hub/internal/api/routes.go

@@ -11,13 +11,13 @@ package api
 type apiAuth string
 
 const (
-	authPublic     apiAuth = "public"      // no credential by design — the reason is on the entry
-	authCustomer   apiAuth = "customer"    // the household's controller key (or the global key)
-	authHost       apiAuth = "host"        // the box's own host key, self-scoped (or the global key)
-	authGlobal     apiAuth = "global"      // the operator/global key only
-	authPassphrase apiAuth = "passphrase"  // X-Retrieval-Password of that household
-	authAppliance  apiAuth = "appliance"   // the appliance's own bearer token
-	authRecovery   apiAuth = "recovery"    // only while the operator has armed recovery mode for the host
+	authPublic     apiAuth = "public"     // no credential by design — the reason is on the entry
+	authCustomer   apiAuth = "customer"   // the household's controller key (or the global key)
+	authHost       apiAuth = "host"       // the box's own host key, self-scoped (or the global key)
+	authGlobal     apiAuth = "global"     // the operator/global key only
+	authPassphrase apiAuth = "passphrase" // X-Retrieval-Password of that household
+	authAppliance  apiAuth = "appliance"  // the appliance's own bearer token
+	authRecovery   apiAuth = "recovery"   // only while the operator has armed recovery mode for the host
 )
 
 type apiRoute struct {