Apply rustfmt across the crate
bento: latest-wins cooperative cancel + gatekeeper auto-grant + checked publish ledger (Run 3 S1/S2/S3)
bento: enforce publish monotonicity + restart recovery (Run 2 S5/S2)