style: cargo fmt --all — make codebase rustfmt-clean

First run of the build-and-test CI gate (cargo fmt --all -- --check) surfaced
pre-existing formatting drift across the agent and server crates. Apply rustfmt
across the workspace so the codebase meets its own CI gate. Pure formatting; no
logic changes.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

server/src/api/auth_logout.rs

@@ -1,13 +1,13 @@
 //! Logout and token revocation endpoints
 
 use axum::{
-    extract::{Request, State, Path},
-    http::{StatusCode, HeaderMap},
+    extract::{Path, Request, State},
+    http::{HeaderMap, StatusCode},
     Json,
 };
-use uuid::Uuid;
 use serde::Serialize;
 use tracing::{info, warn};
+use uuid::Uuid;
 
 use crate::auth::AuthenticatedUser;
 use crate::AppState;
@@ -15,7 +15,9 @@ use crate::AppState;
 use super::auth::ErrorResponse;
 
 /// Extract JWT token from Authorization header
-fn extract_token_from_headers(headers: &HeaderMap) -> Result<String, (StatusCode, Json<ErrorResponse>)> {
+fn extract_token_from_headers(
+    headers: &HeaderMap,
+) -> Result<String, (StatusCode, Json<ErrorResponse>)> {
     let auth_header = headers
         .get("Authorization")
         .and_then(|v| v.to_str().ok())
@@ -28,16 +30,14 @@ fn extract_token_from_headers(headers: &HeaderMap) -> Result<String, (StatusCode
             )
         })?;
 
-    let token = auth_header
-        .strip_prefix("Bearer ")
-        .ok_or_else(|| {
-            (
-                StatusCode::UNAUTHORIZED,
-                Json(ErrorResponse {
-                    error: "Invalid Authorization format".to_string(),
-                }),
-            )
-        })?;
+    let token = auth_header.strip_prefix("Bearer ").ok_or_else(|| {
+        (
+            StatusCode::UNAUTHORIZED,
+            Json(ErrorResponse {
+                error: "Invalid Authorization format".to_string(),
+            }),
+        )
+    })?;
 
     Ok(token.to_string())
 }
@@ -124,7 +124,8 @@ pub async fn revoke_user_tokens(
     Err((
         StatusCode::NOT_IMPLEMENTED,
         Json(ErrorResponse {
-            error: "User token revocation not yet implemented - requires session tracking table".to_string(),
+            error: "User token revocation not yet implemented - requires session tracking table"
+                .to_string(),
         }),
     ))
 }
@@ -179,10 +180,16 @@ pub async fn cleanup_blacklist(
         ));
     }
 
-    let removed = state.token_blacklist.cleanup_expired(&state.jwt_config).await;
+    let removed = state
+        .token_blacklist
+        .cleanup_expired(&state.jwt_config)
+        .await;
     let remaining = state.token_blacklist.len().await;
 
-    info!("Admin {} cleaned up blacklist: {} tokens removed, {} remaining", admin.username, removed, remaining);
+    info!(
+        "Admin {} cleaned up blacklist: {} tokens removed, {} remaining",
+        admin.username, removed, remaining
+    );
 
     Ok(Json(CleanupResponse {
         removed_count: removed,