style: run gofmt -s across all Go files

Fixes Go Report Card gofmt score from 52% to 100%.
Pure formatting changes — no logic modifications.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

internal/domain/audit.go

@@ -7,14 +7,14 @@ import (
 
 // AuditEvent records an action taken in the control plane.
 type AuditEvent struct {
-	ID           string      `json:"id"`
-	Actor        string      `json:"actor"`
-	ActorType    ActorType   `json:"actor_type"`
-	Action       string      `json:"action"`
-	ResourceType string      `json:"resource_type"`
-	ResourceID   string      `json:"resource_id"`
+	ID           string          `json:"id"`
+	Actor        string          `json:"actor"`
+	ActorType    ActorType       `json:"actor_type"`
+	Action       string          `json:"action"`
+	ResourceType string          `json:"resource_type"`
+	ResourceID   string          `json:"resource_id"`
 	Details      json.RawMessage `json:"details"`
-	Timestamp    time.Time   `json:"timestamp"`
+	Timestamp    time.Time       `json:"timestamp"`
 }
 
 // ActorType represents the entity performing an action.

internal/domain/certificate.go

@@ -6,36 +6,36 @@ import (
 
 // ManagedCertificate represents a certificate managed by the control plane.
 type ManagedCertificate struct {
-	ID              string            `json:"id"`
-	Name            string            `json:"name"`
-	CommonName      string            `json:"common_name"`
-	SANs            []string          `json:"sans"`
-	Environment     string            `json:"environment"`
-	OwnerID         string            `json:"owner_id"`
-	TeamID          string            `json:"team_id"`
-	IssuerID        string            `json:"issuer_id"`
-	TargetIDs       []string          `json:"target_ids"`
-	RenewalPolicyID string            `json:"renewal_policy_id"`
-	Status          CertificateStatus `json:"status"`
-	ExpiresAt       time.Time         `json:"expires_at"`
-	Tags            map[string]string `json:"tags"`
-	LastRenewalAt   *time.Time        `json:"last_renewal_at,omitempty"`
-	LastDeploymentAt *time.Time       `json:"last_deployment_at,omitempty"`
-	CreatedAt       time.Time         `json:"created_at"`
-	UpdatedAt       time.Time         `json:"updated_at"`
+	ID               string            `json:"id"`
+	Name             string            `json:"name"`
+	CommonName       string            `json:"common_name"`
+	SANs             []string          `json:"sans"`
+	Environment      string            `json:"environment"`
+	OwnerID          string            `json:"owner_id"`
+	TeamID           string            `json:"team_id"`
+	IssuerID         string            `json:"issuer_id"`
+	TargetIDs        []string          `json:"target_ids"`
+	RenewalPolicyID  string            `json:"renewal_policy_id"`
+	Status           CertificateStatus `json:"status"`
+	ExpiresAt        time.Time         `json:"expires_at"`
+	Tags             map[string]string `json:"tags"`
+	LastRenewalAt    *time.Time        `json:"last_renewal_at,omitempty"`
+	LastDeploymentAt *time.Time        `json:"last_deployment_at,omitempty"`
+	CreatedAt        time.Time         `json:"created_at"`
+	UpdatedAt        time.Time         `json:"updated_at"`
 }
 
 // CertificateVersion represents a specific version of a certificate.
 type CertificateVersion struct {
-	ID               string    `json:"id"`
-	CertificateID    string    `json:"certificate_id"`
-	SerialNumber     string    `json:"serial_number"`
-	NotBefore        time.Time `json:"not_before"`
-	NotAfter         time.Time `json:"not_after"`
-	FingerprintSHA256 string   `json:"fingerprint_sha256"`
-	PEMChain         string    `json:"pem_chain"`
-	CSRPEM           string    `json:"csr_pem"`
-	CreatedAt        time.Time `json:"created_at"`
+	ID                string    `json:"id"`
+	CertificateID     string    `json:"certificate_id"`
+	SerialNumber      string    `json:"serial_number"`
+	NotBefore         time.Time `json:"not_before"`
+	NotAfter          time.Time `json:"not_after"`
+	FingerprintSHA256 string    `json:"fingerprint_sha256"`
+	PEMChain          string    `json:"pem_chain"`
+	CSRPEM            string    `json:"csr_pem"`
+	CreatedAt         time.Time `json:"created_at"`
 }
 
 // CertificateStatus represents the lifecycle status of a managed certificate.

internal/domain/connector.go

@@ -18,25 +18,25 @@ type Issuer struct {
 
 // DeploymentTarget represents a target system where certificates are deployed.
 type DeploymentTarget struct {
-	ID        string           `json:"id"`
-	Name      string           `json:"name"`
-	Type      TargetType       `json:"type"`
-	AgentID   string           `json:"agent_id"`
-	Config    json.RawMessage  `json:"config"`
-	Enabled   bool             `json:"enabled"`
-	CreatedAt time.Time        `json:"created_at"`
-	UpdatedAt time.Time        `json:"updated_at"`
+	ID        string          `json:"id"`
+	Name      string          `json:"name"`
+	Type      TargetType      `json:"type"`
+	AgentID   string          `json:"agent_id"`
+	Config    json.RawMessage `json:"config"`
+	Enabled   bool            `json:"enabled"`
+	CreatedAt time.Time       `json:"created_at"`
+	UpdatedAt time.Time       `json:"updated_at"`
 }
 
 // Agent represents an agent running on a target system.
 type Agent struct {
-	ID            string      `json:"id"`
-	Name          string      `json:"name"`
-	Hostname      string      `json:"hostname"`
-	Status        AgentStatus `json:"status"`
-	LastHeartbeatAt *time.Time `json:"last_heartbeat_at,omitempty"`
-	RegisteredAt  time.Time   `json:"registered_at"`
-	APIKeyHash    string      `json:"api_key_hash"`
+	ID              string      `json:"id"`
+	Name            string      `json:"name"`
+	Hostname        string      `json:"hostname"`
+	Status          AgentStatus `json:"status"`
+	LastHeartbeatAt *time.Time  `json:"last_heartbeat_at,omitempty"`
+	RegisteredAt    time.Time   `json:"registered_at"`
+	APIKeyHash      string      `json:"api_key_hash"`
 }
 
 // AgentStatus represents the operational status of an agent.
@@ -52,7 +52,7 @@ const (
 type IssuerType string
 
 const (
-	IssuerTypeACME     IssuerType = "ACME"
+	IssuerTypeACME      IssuerType = "ACME"
 	IssuerTypeGenericCA IssuerType = "GenericCA"
 )
 

internal/domain/job.go

@@ -7,18 +7,18 @@ import (
 
 // Job represents a unit of work in the certificate control plane.
 type Job struct {
-	ID           string    `json:"id"`
-	Type         JobType   `json:"type"`
-	CertificateID string   `json:"certificate_id"`
-	TargetID     *string   `json:"target_id,omitempty"`
-	Status       JobStatus `json:"status"`
-	Attempts     int       `json:"attempts"`
-	MaxAttempts  int       `json:"max_attempts"`
-	LastError    *string   `json:"last_error,omitempty"`
-	ScheduledAt  time.Time `json:"scheduled_at"`
-	StartedAt    *time.Time `json:"started_at,omitempty"`
-	CompletedAt  *time.Time `json:"completed_at,omitempty"`
-	CreatedAt    time.Time `json:"created_at"`
+	ID            string     `json:"id"`
+	Type          JobType    `json:"type"`
+	CertificateID string     `json:"certificate_id"`
+	TargetID      *string    `json:"target_id,omitempty"`
+	Status        JobStatus  `json:"status"`
+	Attempts      int        `json:"attempts"`
+	MaxAttempts   int        `json:"max_attempts"`
+	LastError     *string    `json:"last_error,omitempty"`
+	ScheduledAt   time.Time  `json:"scheduled_at"`
+	StartedAt     *time.Time `json:"started_at,omitempty"`
+	CompletedAt   *time.Time `json:"completed_at,omitempty"`
+	CreatedAt     time.Time  `json:"created_at"`
 }
 
 // JobType represents the classification of work to be performed.
@@ -45,9 +45,9 @@ const (
 
 // DeploymentJob represents a job that deploys a certificate to a target via an agent.
 type DeploymentJob struct {
-	Job                `json:"job"`
-	AgentID            string          `json:"agent_id"`
-	DeploymentResult   json.RawMessage `json:"deployment_result,omitempty"`
+	Job              `json:"job"`
+	AgentID          string          `json:"agent_id"`
+	DeploymentResult json.RawMessage `json:"deployment_result,omitempty"`
 }
 
 // WorkItem enriches a Job with target details so the agent knows which connector to use.

internal/domain/policy.go

@@ -7,13 +7,13 @@ import (
 
 // PolicyRule defines enforcement rules for certificate management.
 type PolicyRule struct {
-	ID        string     `json:"id"`
-	Name      string     `json:"name"`
-	Type      PolicyType `json:"type"`
+	ID        string          `json:"id"`
+	Name      string          `json:"name"`
+	Type      PolicyType      `json:"type"`
 	Config    json.RawMessage `json:"config"`
-	Enabled   bool       `json:"enabled"`
-	CreatedAt time.Time  `json:"created_at"`
-	UpdatedAt time.Time  `json:"updated_at"`
+	Enabled   bool            `json:"enabled"`
+	CreatedAt time.Time       `json:"created_at"`
+	UpdatedAt time.Time       `json:"updated_at"`
 }
 
 // PolicyType represents the category of policy enforcement.
@@ -29,12 +29,12 @@ const (
 
 // PolicyViolation records an instance of a certificate violating a policy rule.
 type PolicyViolation struct {
-	ID            string            `json:"id"`
-	CertificateID string            `json:"certificate_id"`
-	RuleID        string            `json:"rule_id"`
-	Message       string            `json:"message"`
-	Severity      PolicySeverity    `json:"severity"`
-	CreatedAt     time.Time         `json:"created_at"`
+	ID            string         `json:"id"`
+	CertificateID string         `json:"certificate_id"`
+	RuleID        string         `json:"rule_id"`
+	Message       string         `json:"message"`
+	Severity      PolicySeverity `json:"severity"`
+	CreatedAt     time.Time      `json:"created_at"`
 }
 
 // PolicySeverity indicates the impact level of a policy violation.