chore(fmt): repo-wide gofmt -w sweep — close drift surfaced by ci-pipeline-cleanup Phase 4

Mechanical reformat. The new 'gofmt drift' CI step (added in
ci-pipeline-cleanup Phase 4, commit 0f205a8) surfaced 111 files
with accumulated gofmt drift across cmd/, internal/, and deploy/test/.

Each file's diff is gofmt-standard: whitespace adjustments, intra-
group import sorting (alphabetical by import path within blank-line-
separated groups), and struct-tag column alignment. No semantic
changes — verified via 'git diff --ignore-all-space' which shows only
the line-position deltas from import reordering.

The gate stays in place after this commit. Going forward it catches
gofmt drift at PR time.

internal/integration/e2e_test.go

@@ -704,17 +704,17 @@ func TestM20EnhancedQueryAPI(t *testing.T) {
 	// Setup: Create a certificate for testing
 	now := time.Now()
 	cert := &domain.ManagedCertificate{
-		ID:          "mc-m20-test-1",
-		Name:        "M20 Test Cert",
-		CommonName:  "m20.example.com",
-		Environment: "production",
-		Status:      domain.CertificateStatusActive,
-		IssuerID:    "iss-local",
-		OwnerID:     "owner-ops",
-		TeamID:      "team-platform",
+		ID:                   "mc-m20-test-1",
+		Name:                 "M20 Test Cert",
+		CommonName:           "m20.example.com",
+		Environment:          "production",
+		Status:               domain.CertificateStatusActive,
+		IssuerID:             "iss-local",
+		OwnerID:              "owner-ops",
+		TeamID:               "team-platform",
 		CertificateProfileID: "prof-standard",
-		CreatedAt:   now,
-		UpdatedAt:   now,
+		CreatedAt:            now,
+		UpdatedAt:            now,
 	}
 	certRepo.certs["mc-m20-test-1"] = cert