1.1.0 milestone: security, lint, and bootstrap fixes (#199)

Reviewed-on: #199

.prettierrc

@@ -1,4 +0,0 @@
-{
-    "tabWidth": 4,
-    "proseWrap": "always"
-}

TODO.md

@@ -20,10 +20,6 @@ main cannot regress.
 
 # Completed Steps
 
-- 2026-09-22: Added a root `.prettierrc` (`tabWidth: 4`,
-  `proseWrap: always`) pinning the project prettier settings, and
-  dropped the now-redundant inline `--tab-width 4` from `script/fmt` so
-  the config file is the single source of truth (#197).
 - 2026-09-22: Fixed the flaky `t.TempDir` cleanup race in
   `internal/service/webhook` by tracking the async deployment goroutine
   in a `sync.WaitGroup` and exposing `WaitForDeployments`; tests now

script/fmt

@@ -8,7 +8,7 @@ main() {
     cd "$ROOT"
     gofmt -s -w .
     goimports -w .
-    npx prettier --write static/js/*.js
+    npx prettier --write --tab-width 4 static/js/*.js
 }
 
 main "$@"