ci fixes: cargo fmt, eslint entities, max-lines split

CI on 6ffbe97 failed on two auto-fixable gates. Both fixed:

  * cargo fmt --all — rustfmt applied across the surface touched
    by the last ~20 commits (world.rs, security_scan.rs,
    routes/{missions,nodes,terminal}.rs, fleet_herdr.rs,
    mission_workspace.rs, benchmark_runner.rs, mission_refiner.rs,
    lib.rs, tests/mission_orchestrator.rs, cm-db/repo/{missions,teams}.rs,
    bins/clawmates-node/src/main.rs)
  * eslint apostrophe escapes in HerdrSessions + MissionWizard
  * eslint max-lines: extracted EditMissionModal + RefineDiffModal
    (each ~200 LoC) into their own files. MissionCanvas drops from
    1424 to 1026, comfortably under both the 1250 eslint cap and the
    1500 CI budget.

New files:
  frontend/src/components/dashboard/EditMissionModal.tsx  (211 LoC)
  frontend/src/components/dashboard/RefineDiffModal.tsx   (208 LoC)

Verified locally: cargo fmt --check clean, cargo check clean,
mission_orchestrator test 3/3 pass, tsc + eslint --quiet both silent.

crates/cm-api/src/mission_workspace.rs

@@ -74,13 +74,7 @@ pub async fn ensure_checkout(
 
 async fn clone(path: &std::path::Path, url: &str) -> Result<(), String> {
     let out = Command::new("git")
-        .args([
-            "clone",
-            "--depth",
-            "1",
-            url,
-            &path.display().to_string(),
-        ])
+        .args(["clone", "--depth", "1", url, &path.display().to_string()])
         .output()
         .await
         .map_err(|e| format!("spawn git clone: {e}"))?;
@@ -99,7 +93,15 @@ async fn clone(path: &std::path::Path, url: &str) -> Result<(), String> {
 
 async fn fetch_and_reset(path: &std::path::Path, branch: &str) -> Result<(), String> {
     let fetch = Command::new("git")
-        .args(["-C", &path.display().to_string(), "fetch", "--depth", "1", "origin", branch])
+        .args([
+            "-C",
+            &path.display().to_string(),
+            "fetch",
+            "--depth",
+            "1",
+            "origin",
+            branch,
+        ])
         .output()
         .await
         .map_err(|e| format!("spawn git fetch: {e}"))?;