style: cargo fmt across Phase 3.5 changes

Pure formatting pass — no behavior changes. Catches the line-wrapping
drift across the new authz / api_keys / middleware / handler edits
that piled up during the implementation.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

crates/manager-core/src/api_key_repo.rs

@@ -112,10 +112,8 @@ pub trait ApiKeyRepository: Send + Sync {
     /// into `set_active(false)` so deactivation invalidates both
     /// sessions (already done by `AdminSessionRepository::delete_for_user`)
     /// and bearer keys at the same moment.
-    async fn expire_all_for_user(
-        &self,
-        user_id: AdminUserId,
-    ) -> Result<u64, ApiKeyRepositoryError>;
+    async fn expire_all_for_user(&self, user_id: AdminUserId)
+        -> Result<u64, ApiKeyRepositoryError>;
 }
 
 pub struct PostgresApiKeyRepository {
@@ -132,7 +130,8 @@ impl PostgresApiKeyRepository {
 #[async_trait]
 impl ApiKeyRepository for PostgresApiKeyRepository {
     async fn create(&self, key: NewApiKey) -> Result<ApiKeyRow, ApiKeyRepositoryError> {
-        let scope_strings: Vec<String> = key.scopes.iter().map(|s| s.as_str().to_string()).collect();
+        let scope_strings: Vec<String> =
+            key.scopes.iter().map(|s| s.as_str().to_string()).collect();
         let row = sqlx::query_as::<_, ApiKeyRecord>(
             "INSERT INTO api_keys \
                 (user_id, hash, prefix, name, scopes, app_id, expires_at) \