fix: resolve Go compilation errors

- Add missing 'fmt' import in exporter_test.go
- Fix ctx.Done() -> ctx.Err() in loader.go (returns channel, not error)
- Remove unused 'crypto/x509' import in svid.go
- Update tlsconfig.AuthorizeAnyOf -> AuthorizeOneOf (API change in go-spiffe v2.6.0)
- Wrap provider.Shutdown in closure to match func() signature

Author: noreply

internal/audit/exporter_test.go

@@ -3,6 +3,7 @@ package audit
 import (
 	"context"
 	"errors"
+	"fmt"
 	"sync"
 	"testing"
 	"time"

internal/repository/loader.go

@@ -179,7 +179,7 @@ func (tpl *tenantPlanLoader) load(ctx context.Context, id string) (*PlanRow, err
 	case res := <-ch:
 		return res.row, res.err
 	case <-ctx.Done():
-		return nil, ctx.Done()
+		return nil, ctx.Err()
 	}
 }
 
@@ -269,7 +269,7 @@ func (tsl *tenantSubLoader) load(ctx context.Context, id string) (*SubscriptionR
 	case res := <-ch:
 		return res.row, res.err
 	case <-ctx.Done():
-		return nil, ctx.Done()
+		return nil, ctx.Err()
 	}
 }
 

internal/security/svid.go

@@ -3,7 +3,6 @@ package security
 import (
 	"context"
 	"crypto/tls"
-	"crypto/x509"
 	"fmt"
 	"sync"
 	"time"
@@ -44,7 +43,7 @@ func NewSVIDRotator(ctx context.Context, socketPath string) (*SVIDRotator, error
 // - Accepts only clients presenting a SPIFFE ID in the allowed set
 // - Automatically uses the latest SVID on each new connection
 func (r *SVIDRotator) ServerTLSConfig(allowedIDs ...spiffeid.ID) *tls.Config {
-	return tlsconfig.MTLSServerConfig(r.source, r.source, tlsconfig.AuthorizeAnyOf(allowedIDs...))
+	return tlsconfig.MTLSServerConfig(r.source, r.source, tlsconfig.AuthorizeOneOf(allowedIDs...))
 }
 
 // ClientTLSConfig returns a tls.Config for gRPC client dials that:

internal/tracing/sampler.go

@@ -130,7 +130,9 @@ func InitTracer(serviceName string) (func(), error) {
 	otel.SetTracerProvider(provider)
 	otel.SetTextMapPropagator(InitPropagators())
 
-	return provider.Shutdown, nil
+	return func() {
+		_ = provider.Shutdown(context.Background())
+	}, nil
 }
 
 func getEnvFloat(key string, fallback float64) float64 {