chore(fmt): repo-wide gofmt -w sweep — close drift surfaced by ci-pipeline-cleanup Phase 4

Mechanical reformat. The new 'gofmt drift' CI step (added in
ci-pipeline-cleanup Phase 4, commit 71b2245) surfaced 111 files
with accumulated gofmt drift across cmd/, internal/, and deploy/test/.

Each file's diff is gofmt-standard: whitespace adjustments, intra-
group import sorting (alphabetical by import path within blank-line-
separated groups), and struct-tag column alignment. No semantic
changes — verified via 'git diff --ignore-all-space' which shows only
the line-position deltas from import reordering.

The gate stays in place after this commit. Going forward it catches
gofmt drift at PR time.

internal/service/audit_redact.go

@@ -73,29 +73,29 @@ var credentialKeys = map[string]bool{
 // Note `ip_address` is debatable — useful for forensics but flagged by
 // GDPR Art. 32 — defaulting to redact, operators can audit + adjust.
 var piiKeys = map[string]bool{
-	"email":          true,
-	"email_address":  true,
-	"phone":          true,
-	"phone_number":   true,
-	"telephone":      true,
-	"ssn":            true,
+	"email":           true,
+	"email_address":   true,
+	"phone":           true,
+	"phone_number":    true,
+	"telephone":       true,
+	"ssn":             true,
 	"social_security": true,
-	"dob":            true,
-	"date_of_birth":  true,
-	"name":           true,
-	"full_name":      true,
-	"first_name":     true,
-	"last_name":      true,
-	"surname":        true,
-	"address":        true,
-	"street":         true,
-	"street_address": true,
-	"city":           true,
-	"postal_code":    true,
-	"zip":            true,
-	"zipcode":        true,
-	"ip":             true,
-	"ip_address":     true,
+	"dob":             true,
+	"date_of_birth":   true,
+	"name":            true,
+	"full_name":       true,
+	"first_name":      true,
+	"last_name":       true,
+	"surname":         true,
+	"address":         true,
+	"street":          true,
+	"street_address":  true,
+	"city":            true,
+	"postal_code":     true,
+	"zip":             true,
+	"zipcode":         true,
+	"ip":              true,
+	"ip_address":      true,
 }
 
 // RedactDetailsForAudit walks a details map and returns a NEW map with