style(all): reformat long lines across files for improved code readability and alignment of nested structures

.github/workflows/ci.yml

@@ -216,13 +216,6 @@ jobs:
   rust-stable-test-linux-with-docker:
     name: rust-stable-test / linux-with-docker
     runs-on: ubuntu-latest
-    services:
-      docker:
-        image: docker:dind
-        options: --privileged
-    env:
-      DOCKER_TLS_CERTDIR: ""
-      DOCKER_HOST: tcp://docker:2375
     steps:
       - uses: actions/checkout@v6
 
@@ -253,13 +246,6 @@ jobs:
   escape-positive-control:
     name: escape-positive-control
     runs-on: ubuntu-latest
-    services:
-      docker:
-        image: docker:dind
-        options: --privileged
-    env:
-      DOCKER_TLS_CERTDIR: ""
-      DOCKER_HOST: tcp://docker:2375
     steps:
       - uses: actions/checkout@v6
 
@@ -364,16 +350,18 @@ jobs:
           cache: true
           cache-key: benchmark-gate-release
 
+      - uses: taiki-e/install-action@nextest
+
       - name: Build benchmark + perf test binaries
-        run: cargo test --release --all-features --test benchmark_test --test perf_tests --no-run
+        run: cargo nextest run --release --all-features --test benchmark_test --test perf_tests --no-run
 
       - name: Accuracy regression gate (P/R/F1)
-        run: cargo test --release --all-features --test benchmark_test -- --ignored --nocapture benchmark_evaluation
+        run: cargo nextest run --release --all-features --test benchmark_test --run-ignored only --no-capture benchmark_evaluation
 
       - name: Performance regression gate
         env:
           NYX_CI_BENCH: "1"
-        run: cargo test --release --all-features --test perf_tests -- --nocapture
+        run: cargo nextest run --release --all-features --test perf_tests --no-capture
 
       - name: Upload benchmark results
         if: always()
@@ -404,6 +392,8 @@ jobs:
           toolchain: stable
           cache: true
 
+      - uses: taiki-e/install-action@nextest
+
       - name: Corpus unit tests (no_marker_collisions, all_payloads_have_fixture_paths)
         run: cargo nextest run --lib -p nyx-scanner dynamic::corpus
         env:

.github/workflows/corpus_promote.yml

@@ -111,18 +111,18 @@ jobs:
           body_file=$(mktemp)
 
           cat > "$body_file" <<'PREAMBLE'
-## Corpus Promotion Proposal
+          ## Corpus Promotion Proposal
 
-This PR was generated automatically by the weekly corpus-promote workflow.
-It does **not** auto-merge — a human reviewer must approve each candidate
-before it can land in `src/dynamic/corpus.rs` (§16.4).
+          This PR was generated automatically by the weekly corpus-promote workflow.
+          It does **not** auto-merge — a human reviewer must approve each candidate
+          before it can land in `src/dynamic/corpus.rs` (§16.4).
 
-### Candidates
+          ### Candidates
 
-The following payloads were discovered by the internal mutation fuzzer and
-confirmed via `sink_hit && oracle_fired` against instrumented fixtures:
+          The following payloads were discovered by the internal mutation fuzzer and
+          confirmed via `sink_hit && oracle_fired` against instrumented fixtures:
 
-PREAMBLE
+          PREAMBLE
 
           for f in $CANDIDATE_FILES; do
             sidecar="${f}.json"
@@ -136,16 +136,16 @@ PREAMBLE
 
           cat >> "$body_file" <<'CHECKLIST'
 
-### Review checklist
+          ### Review checklist
 
-- [ ] Bytes are a genuine attack vector, not a fixture artifact
-- [ ] Oracle marker is unique (no collision with other caps)
-- [ ] `fixture_paths` updated in `src/dynamic/corpus.rs`
-- [ ] `since_corpus_version` set to next version
-- [ ] `CORPUS_VERSION` bumped and bump history updated
+          - [ ] Bytes are a genuine attack vector, not a fixture artifact
+          - [ ] Oracle marker is unique (no collision with other caps)
+          - [ ] `fixture_paths` updated in `src/dynamic/corpus.rs`
+          - [ ] `since_corpus_version` set to next version
+          - [ ] `CORPUS_VERSION` bumped and bump history updated
 
-_Generated by corpus_promote.yml — do not auto-merge._
-CHECKLIST
+          _Generated by corpus_promote.yml — do not auto-merge._
+          CHECKLIST
 
           git add fuzz-discovered/ || true
           git diff --cached --quiet || git commit -m "chore: add ${CANDIDATE_COUNT} fuzzer-discovered corpus candidates"

.github/workflows/dynamic.yml

@@ -13,7 +13,7 @@
 #                        chroot-leg of the escape suite skips silently
 #                        (Phase 20 follow-up #4 in deferred.md).
 #
-#   linux-with-docker  — Ubuntu host with docker-in-docker.  Exercises
+#   linux-with-docker  — Ubuntu host with the runner Docker daemon.  Exercises
 #                        the docker backend (Phase 19) and the
 #                        differential-confirmation parity tests.
 #
@@ -79,13 +79,6 @@ jobs:
   linux-with-docker:
     name: dynamic / linux-with-docker
     runs-on: ubuntu-latest
-    services:
-      docker:
-        image: docker:dind
-        options: --privileged
-    env:
-      DOCKER_TLS_CERTDIR: ""
-      DOCKER_HOST: tcp://docker:2375
     steps:
       - uses: actions/checkout@v6