style: format seluruh workspace dengan cargo fmt

Menyeragamkan format kode sesuai rustfmt (126 file). Sebelumnya
lefthook pre-commit 'cargo fmt --check' akan gagal pada commit apa pun.

apps/infrastructure/src/middleware/auth.rs

@@ -114,7 +114,11 @@ where
         }
 
         Box::pin(async move {
-            Ok((StatusCode::UNAUTHORIZED, "missing or invalid X-Session-Id header").into_response())
+            Ok((
+                StatusCode::UNAUTHORIZED,
+                "missing or invalid X-Session-Id header",
+            )
+                .into_response())
         })
     }
 }

apps/infrastructure/src/middleware/cors.rs

@@ -1,26 +0,0 @@
-//! CORS layer factory for the daemon HTTP server.
-
-use tower_http::cors::{AllowHeaders, AllowOrigin, CorsLayer};
-
-/// Return a permissive CorsLayer for local daemon IPC.
-///
-/// All method and header names are static strings guaranteed to be valid
-/// HTTP tokens — `.parse()` is infallible here.
-pub fn default_cors_layer() -> CorsLayer {
-    CorsLayer::new()
-        .allow_origin(AllowOrigin::any())
-        .allow_methods([
-            "GET".parse().expect("static HTTP method"),
-            "POST".parse().expect("static HTTP method"),
-            "PUT".parse().expect("static HTTP method"),
-            "DELETE".parse().expect("static HTTP method"),
-            "PATCH".parse().expect("static HTTP method"),
-            "OPTIONS".parse().expect("static HTTP method"),
-        ])
-        .allow_headers(AllowHeaders::any())
-        .expose_headers([
-            "Content-Type".parse().expect("static HTTP header"),
-            "X-Session-Id".parse().expect("static HTTP header"),
-            "X-Request-Id".parse().expect("static HTTP header"),
-        ])
-}

apps/infrastructure/src/middleware/mod.rs

@@ -1,5 +1,4 @@
 //! Axum middleware tower for the HTTP API layer.
 
 pub mod auth;
-pub mod cors;
 pub mod rate_limit;

apps/infrastructure/src/middleware/rate_limit.rs

@@ -28,11 +28,14 @@ impl RateLimiter {
             .as_secs() as i64;
 
         let cutoff = now.saturating_sub(window_secs as i64);
-        let mut windows = self.windows.lock().map_err(|e| {
-            anyhow::anyhow!("rate limiter lock poisoned: {e}")
-        })?;
+        let mut windows = self
+            .windows
+            .lock()
+            .map_err(|e| anyhow::anyhow!("rate limiter lock poisoned: {e}"))?;
 
-        let timestamps = windows.entry(client_id.to_string()).or_insert_with(Vec::new);
+        let timestamps = windows
+            .entry(client_id.to_string())
+            .or_insert_with(Vec::new);
         timestamps.retain(|&ts| ts >= cutoff);
 
         if timestamps.len() >= max_requests as usize {