ci fixes: cargo fmt, eslint entities, max-lines split

CI on 6ffbe97 failed on two auto-fixable gates. Both fixed:

  * cargo fmt --all — rustfmt applied across the surface touched
    by the last ~20 commits (world.rs, security_scan.rs,
    routes/{missions,nodes,terminal}.rs, fleet_herdr.rs,
    mission_workspace.rs, benchmark_runner.rs, mission_refiner.rs,
    lib.rs, tests/mission_orchestrator.rs, cm-db/repo/{missions,teams}.rs,
    bins/clawmates-node/src/main.rs)
  * eslint apostrophe escapes in HerdrSessions + MissionWizard
  * eslint max-lines: extracted EditMissionModal + RefineDiffModal
    (each ~200 LoC) into their own files. MissionCanvas drops from
    1424 to 1026, comfortably under both the 1250 eslint cap and the
    1500 CI budget.

New files:
  frontend/src/components/dashboard/EditMissionModal.tsx  (211 LoC)
  frontend/src/components/dashboard/RefineDiffModal.tsx   (208 LoC)

Verified locally: cargo fmt --check clean, cargo check clean,
mission_orchestrator test 3/3 pass, tsc + eslint --quiet both silent.

crates/cm-api/src/routes/missions.rs

@@ -431,15 +431,14 @@ pub async fn set_status(
         .await?;
 
     if prior.status == "draft" && body.status == "running" {
-        if let Err(e) =
-            crate::mission_orchestrator::on_launch(
-                &state.pool,
-                user.workspace_id,
-                user.user_id,
-                id,
-                Some(state.node_hub.clone()),
-            )
-                .await
+        if let Err(e) = crate::mission_orchestrator::on_launch(
+            &state.pool,
+            user.workspace_id,
+            user.user_id,
+            id,
+            Some(state.node_hub.clone()),
+        )
+        .await
         {
             eprintln!("mission {id}: on_launch failed: {e}");
         }

crates/cm-api/src/routes/nodes.rs

@@ -364,7 +364,8 @@ async fn bridge_terminal(hub: Arc<NodeHub>, node_id: NodeId, socket: WebSocket)
                             } else {
                                 Some(c.command.as_slice())
                             };
-                            hub.open_pty(node_id, sid, cols, rows, None, None, cmd).await
+                            hub.open_pty(node_id, sid, cols, rows, None, None, cmd)
+                                .await
                         }
                         "webrtc_offer" => {
                             hub.webrtc_offer(

crates/cm-api/src/routes/terminal.rs

@@ -402,8 +402,16 @@ async fn bridge_node(
                     match c.kind.as_str() {
                         "resize" => hub.terminal_resize(node_id, sid, cols, rows).await,
                         "fallback" => {
-                            hub.open_pty(node_id, sid, cols, rows, Some(&container), Some(&session), None)
-                                .await
+                            hub.open_pty(
+                                node_id,
+                                sid,
+                                cols,
+                                rows,
+                                Some(&container),
+                                Some(&session),
+                                None,
+                            )
+                            .await
                         }
                         "webrtc_offer" => {
                             hub.webrtc_offer(

crates/cm-api/src/routes/world.rs

@@ -586,4 +586,3 @@ pub async fn world_replay(
         json!({ "events": events, "hours": hours, "count": rows.len() }),
     ))
 }
-