ci fixes: cargo fmt, eslint entities, max-lines split

CI on 6ffbe97 failed on two auto-fixable gates. Both fixed:

  * cargo fmt --all — rustfmt applied across the surface touched
    by the last ~20 commits (world.rs, security_scan.rs,
    routes/{missions,nodes,terminal}.rs, fleet_herdr.rs,
    mission_workspace.rs, benchmark_runner.rs, mission_refiner.rs,
    lib.rs, tests/mission_orchestrator.rs, cm-db/repo/{missions,teams}.rs,
    bins/clawmates-node/src/main.rs)
  * eslint apostrophe escapes in HerdrSessions + MissionWizard
  * eslint max-lines: extracted EditMissionModal + RefineDiffModal
    (each ~200 LoC) into their own files. MissionCanvas drops from
    1424 to 1026, comfortably under both the 1250 eslint cap and the
    1500 CI budget.

New files:
  frontend/src/components/dashboard/EditMissionModal.tsx  (211 LoC)
  frontend/src/components/dashboard/RefineDiffModal.tsx   (208 LoC)

Verified locally: cargo fmt --check clean, cargo check clean,
mission_orchestrator test 3/3 pass, tsc + eslint --quiet both silent.

crates/cm-api/src/topology_worker.rs

@@ -97,10 +97,7 @@ async fn reap_stuck_runs(pool: &PgPool) -> Result<(), sqlx::Error> {
         let _ = cm_db::repo::topology_runs::fail(
             pool,
             id,
-            &format!(
-                "reaped: no step records after {}s",
-                REAP_STUCK_AFTER_SECS
-            ),
+            &format!("reaped: no step records after {}s", REAP_STUCK_AFTER_SECS),
         )
         .await;
     }
@@ -312,4 +309,3 @@ async fn drive<E: TurnExecutor>(
     })
     .await
 }
-