chore: gofmt/goimports the proxy authorization changes

Fix the lint failure: align the membership-gate body constants and drop a
stray blank line left by removing the obsolete resolveKCPPath test.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: mjudeikis

pkg/server/proxy/proxy.go

@@ -730,8 +730,8 @@ func writeOrgWorkspaceForbidden(w http.ResponseWriter) {
 
 // Response bodies for the membership-gated cluster authorization (Option A).
 const (
-	bareNoClusterBody = `{"kind":"Status","apiVersion":"v1","metadata":{},"status":"Failure","message":"no workspace selected — address /clusters/{id} (resolve the id via the hub REST endpoints, e.g. /api/orgs/{org}/workspaces)","reason":"BadRequest","code":400}`
-	addressByIDBody   = `{"kind":"Status","apiVersion":"v1","metadata":{},"status":"Failure","message":"address workspaces by cluster ID (/clusters/{id}), not by path — resolve the id via /api/orgs/{org}/workspaces/{ws}","reason":"Forbidden","code":403}`
+	bareNoClusterBody       = `{"kind":"Status","apiVersion":"v1","metadata":{},"status":"Failure","message":"no workspace selected — address /clusters/{id} (resolve the id via the hub REST endpoints, e.g. /api/orgs/{org}/workspaces)","reason":"BadRequest","code":400}`
+	addressByIDBody         = `{"kind":"Status","apiVersion":"v1","metadata":{},"status":"Failure","message":"address workspaces by cluster ID (/clusters/{id}), not by path — resolve the id via /api/orgs/{org}/workspaces/{ws}","reason":"Forbidden","code":403}`
 	clusterAccessDeniedBody = `{"kind":"Status","apiVersion":"v1","metadata":{},"status":"Failure","message":"cluster access denied","reason":"Forbidden","code":403}`
 )
 

pkg/server/proxy/proxy_test.go

@@ -23,7 +23,6 @@ import (
 	"testing"
 )
 
-
 // TestIsOrgWorkspacePath covers the structural rule that decides whether
 // a kcp logical-cluster path targets an Organization workspace (which the
 // proxy rejects per O-10) or a child team Workspace under one (which