- errorlint: fmt.Errorf %v→%w across all handlers (errors now wrap the
underlying SDK/HTTP error for errors.Is/As); errors.Is for
context.Canceled in cmd
- staticcheck quickfixes: Fprintf over WriteString(Sprintf), tagged
switches, omit inferred 'any'; QF1001 resolved by hoisting hex checks
into isHex predicates (normalizeColor, validateSHA)
- govet: reflect.Ptr → reflect.Pointer in pkg/ptr
- errcheck: explicit '_ =' for fs.Parse (ExitOnError) and deferred
zap Sync
- repair four test assertions the autofix broke (it dropped the
're.Code != X' half of combined type-assert checks, inverting the
test); all errors.As sites use 'var re *resource.ResourceError'
golangci-lint: 0 issues. staticcheck, vet, tests: clean.