chore(fmt): repo-wide gofmt -w sweep — close drift surfaced by ci-pipeline-cleanup Phase 4

Mechanical reformat. The new 'gofmt drift' CI step (added in
ci-pipeline-cleanup Phase 4, commit 71b2245) surfaced 111 files
with accumulated gofmt drift across cmd/, internal/, and deploy/test/.

Each file's diff is gofmt-standard: whitespace adjustments, intra-
group import sorting (alphabetical by import path within blank-line-
separated groups), and struct-tag column alignment. No semantic
changes — verified via 'git diff --ignore-all-space' which shows only
the line-position deltas from import reordering.

The gate stays in place after this commit. Going forward it catches
gofmt drift at PR time.

internal/service/verification.go

@@ -11,9 +11,9 @@ import (
 
 // VerificationService handles recording and querying certificate deployment verification results.
 type VerificationService struct {
-	jobRepo       repository.JobRepository
-	auditService  *AuditService
-	logger        *slog.Logger
+	jobRepo      repository.JobRepository
+	auditService *AuditService
+	logger       *slog.Logger
 }
 
 // NewVerificationService creates a new verification service.
@@ -23,9 +23,9 @@ func NewVerificationService(
 	logger *slog.Logger,
 ) *VerificationService {
 	return &VerificationService{
-		jobRepo:       jobRepo,
-		auditService:  auditService,
-		logger:        logger,
+		jobRepo:      jobRepo,
+		auditService: auditService,
+		logger:       logger,
 	}
 }
 
@@ -76,11 +76,11 @@ func (s *VerificationService) RecordVerificationResult(ctx context.Context, resu
 	// Record audit event
 	auditEvent := "job_verification_success"
 	auditDetails := map[string]interface{}{
-		"job_id":                  result.JobID,
-		"target_id":               result.TargetID,
-		"expected_fingerprint":    result.ExpectedFingerprint,
-		"actual_fingerprint":      result.ActualFingerprint,
-		"verified":                result.Verified,
+		"job_id":               result.JobID,
+		"target_id":            result.TargetID,
+		"expected_fingerprint": result.ExpectedFingerprint,
+		"actual_fingerprint":   result.ActualFingerprint,
+		"verified":             result.Verified,
 	}
 
 	if result.Error != "" {
@@ -114,7 +114,7 @@ func (s *VerificationService) GetVerificationResult(ctx context.Context, jobID s
 	}
 
 	result := &domain.VerificationResult{
-		JobID:  job.ID,
+		JobID:    job.ID,
 		Verified: job.VerificationStatus == domain.VerificationSuccess,
 	}