style: run gofmt -s across all Go files

Fixes Go Report Card gofmt score from 52% to 100%.
Pure formatting changes — no logic modifications.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

internal/connector/issuer/acme/acme.go

@@ -22,10 +22,10 @@ import (
 
 // Config represents the ACME issuer connector configuration.
 type Config struct {
-	DirectoryURL string `json:"directory_url"` // ACME directory URL (e.g., https://acme-staging-v02.api.letsencrypt.org/directory)
-	Email        string `json:"email"`         // Contact email for the ACME account
-	EABKid       string `json:"eab_kid,omitempty"`  // External Account Binding Key ID (for some CAs)
-	EABHmac      string `json:"eab_hmac,omitempty"` // External Account Binding HMAC Key
+	DirectoryURL string `json:"directory_url"`       // ACME directory URL (e.g., https://acme-staging-v02.api.letsencrypt.org/directory)
+	Email        string `json:"email"`               // Contact email for the ACME account
+	EABKid       string `json:"eab_kid,omitempty"`   // External Account Binding Key ID (for some CAs)
+	EABHmac      string `json:"eab_hmac,omitempty"`  // External Account Binding HMAC Key
 	HTTPPort     int    `json:"http_port,omitempty"` // Port for HTTP-01 challenge server (default: 80)
 }
 

internal/connector/issuer/interface.go

@@ -33,12 +33,12 @@ type IssuanceRequest struct {
 
 // IssuanceResult contains the result of a successful certificate issuance.
 type IssuanceResult struct {
-	CertPEM    string    `json:"cert_pem"`
-	ChainPEM   string    `json:"chain_pem"`
-	Serial     string    `json:"serial"`
-	NotBefore  time.Time `json:"not_before"`
-	NotAfter   time.Time `json:"not_after"`
-	OrderID    string    `json:"order_id"`
+	CertPEM   string    `json:"cert_pem"`
+	ChainPEM  string    `json:"chain_pem"`
+	Serial    string    `json:"serial"`
+	NotBefore time.Time `json:"not_before"`
+	NotAfter  time.Time `json:"not_after"`
+	OrderID   string    `json:"order_id"`
 }
 
 // RenewalRequest contains the parameters for renewing a certificate.
@@ -57,13 +57,13 @@ type RevocationRequest struct {
 
 // OrderStatus contains the status of a pending issuance or renewal order.
 type OrderStatus struct {
-	OrderID    string    `json:"order_id"`
-	Status     string    `json:"status"`
-	Message    *string   `json:"message,omitempty"`
-	CertPEM    *string   `json:"cert_pem,omitempty"`
-	ChainPEM   *string   `json:"chain_pem,omitempty"`
-	Serial     *string   `json:"serial,omitempty"`
-	NotBefore  *time.Time `json:"not_before,omitempty"`
-	NotAfter   *time.Time `json:"not_after,omitempty"`
-	UpdatedAt  time.Time  `json:"updated_at"`
+	OrderID   string     `json:"order_id"`
+	Status    string     `json:"status"`
+	Message   *string    `json:"message,omitempty"`
+	CertPEM   *string    `json:"cert_pem,omitempty"`
+	ChainPEM  *string    `json:"chain_pem,omitempty"`
+	Serial    *string    `json:"serial,omitempty"`
+	NotBefore *time.Time `json:"not_before,omitempty"`
+	NotAfter  *time.Time `json:"not_after,omitempty"`
+	UpdatedAt time.Time  `json:"updated_at"`
 }

internal/connector/issuer/local/local.go

@@ -379,10 +379,10 @@ func (c *Connector) generateCertificate(csr *x509.CertificateRequest, additional
 			x509.ExtKeyUsageServerAuth,
 			x509.ExtKeyUsageClientAuth,
 		},
-		DNSNames:            dnsNames,
-		EmailAddresses:      emails,
-		SubjectKeyId:        hashPublicKey(csr.PublicKey),
-		AuthorityKeyId:      c.caCert.SubjectKeyId,
+		DNSNames:       dnsNames,
+		EmailAddresses: emails,
+		SubjectKeyId:   hashPublicKey(csr.PublicKey),
+		AuthorityKeyId: c.caCert.SubjectKeyId,
 	}
 
 	// Add IP addresses if present