style: apply cargo fmt so the release gate can run

The release gate's first real stage is `cargo fmt --check`, and it had
44 diffs across 15 files — enough to abort `create-release.sh` at step 0
before it touched a version number. Some of that drift is mine from the
last two days, some predates it in files I never opened
(bootstrap.rs, ghost_reaper.rs, openwrt/router.rs), and one is the
regenerated fips/app_ports.rs.

No behaviour change — rustfmt only.

Gate now: 8 of 9 green. The remaining red is cargo-test-weekly exiting
124, which is the 25-minute `timeout` expiring during a cold
CARGO_INCREMENTAL=0 rebuild on a loaded node — the tests never started.
Not a test failure.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

core/archipelago/src/api/rpc/lnd/wallet.rs

@@ -667,7 +667,11 @@ impl RpcHandler {
             .get("state")
             .and_then(|v| v.as_str())
             .map(|s| s == "SETTLED")
-            .unwrap_or_else(|| body.get("settled").and_then(|v| v.as_bool()).unwrap_or(false));
+            .unwrap_or_else(|| {
+                body.get("settled")
+                    .and_then(|v| v.as_bool())
+                    .unwrap_or(false)
+            });
         let amt_paid_sat = body
             .get("amt_paid_sat")
             .and_then(|v| v.as_str())

core/archipelago/src/api/rpc/openwrt.rs

@@ -43,8 +43,12 @@ impl RpcHandler {
         // plus a blocking SSH verify per candidate. Inline, one click of
         // "scan for routers" held a tokio worker for that whole time.
         let routers = tokio::task::spawn_blocking(move || {
-            tokio::runtime::Handle::current()
-                .block_on(detect::scan_subnet(subnet, prefix, &ssh_user, &ssh_password))
+            tokio::runtime::Handle::current().block_on(detect::scan_subnet(
+                subnet,
+                prefix,
+                &ssh_user,
+                &ssh_password,
+            ))
         })
         .await
         .context("openwrt scan task")?;

core/archipelago/src/api/rpc/wallet.rs

@@ -380,9 +380,7 @@ impl RpcHandler {
             .and_then(|v| v.as_bool())
             .unwrap_or(false);
 
-        let mut password = self
-            .verify_reveal_auth(&params, "the ecash seed")
-            .await?;
+        let mut password = self.verify_reveal_auth(&params, "the ecash seed").await?;
         password.zeroize();
 
         let seed =