Run the formatter over the face branch before it reaches CI

The merge of the SCRFD/MobileFaceNet work brought 69 rustfmt diffs across
dr-catalog, dr-face and dr-ui with it, so `cargo fmt --all -- --check` fails
on master and the Desktop job stops at its Format step — before clippy, the
tests or the release build have run at all. That makes the whole desktop
half of CI blind: a real compile error behind this would look exactly the
same from the outside. There was nothing behind it, as it turns out — with
the formatting fixed, clippy, the test suite and the release build all pass.

Every .rs hunk is `cargo fmt --all` on the pinned 1.92.0 toolchain, not a
hand edit, but it is worth being precise about what that moved, because it
is more than whitespace. Besides reflowing signatures and call chains,
rustfmt reordered the `pub mod` and `pub use` items in dr-face/src/lib.rs so
the `#[cfg(feature = "inference")]` entries sort in place, added the trailing
semicolon inside `let ... else { return }` bodies in identity_ui.rs, wrapped
a bare closure body in braces in cluster.rs, adjusted trailing commas, and
dropped a stray blank line at the end of identity_ui.rs. All of it is
semantically inert; none of it changes behaviour.

docs/traceability.md rides along because it has to. The matrix records each
TRACES tag by line number, and reflowing develop.rs, lib.rs, faces.rs,
identity.rs and identity_ui.rs moved them — FR-CAT-8, FR-CAT-9, FR-CULL-10,
FR-DEV-3, FR-DEV-3a and FR-DEV-3c all shift by a line or two. The matrix was
verified up to date on d777f7f before this commit, so this is drift these
formatting changes introduced, not pre-existing staleness being swept up.
Leaving it for a follow-up commit would hand traceability-check.yml a
failure caused entirely by a whitespace change.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

core/dr-catalog/src/faces.rs

@@ -364,10 +364,7 @@ pub type StoredEmbedding = (FaceId, ImageId, Vec<u8>, f32);
 /// Returned as raw f16 blobs rather than decoded vectors: the caller is
 /// `dr-face`, which owns the decoding, and a catalog that widened them here
 /// would double the memory of the one operation that holds them all at once.
-pub fn embeddings(
-    conn: &Connection,
-    model_id: &str,
-) -> Result<Vec<StoredEmbedding>, CatalogError> {
+pub fn embeddings(conn: &Connection, model_id: &str) -> Result<Vec<StoredEmbedding>, CatalogError> {
     let mut q = conn.prepare(
         "SELECT id, image_id, embedding, crop_px FROM faces
           WHERE model_id = ?1 ORDER BY id",
@@ -401,11 +398,7 @@ pub fn create_person(conn: &Connection, name: &str) -> Result<PersonId, CatalogE
 }
 
 /// Rename a person. The identity is untouched.
-pub fn rename_person(
-    conn: &Connection,
-    person: PersonId,
-    name: &str,
-) -> Result<(), CatalogError> {
+pub fn rename_person(conn: &Connection, person: PersonId, name: &str) -> Result<(), CatalogError> {
     conn.execute(
         "UPDATE people SET name = ?2, revision = revision + 1, modified = ?3
           WHERE id = ?1",
@@ -483,10 +476,7 @@ pub fn merge_people(
 }
 
 /// Follow a merge redirect to the person that outlived it.
-pub fn resolve_person(
-    conn: &Connection,
-    person: PersonId,
-) -> Result<PersonId, CatalogError> {
+pub fn resolve_person(conn: &Connection, person: PersonId) -> Result<PersonId, CatalogError> {
     let mut at = person;
     // Bounded rather than `loop`: a redirect cycle would otherwise hang the UI
     // thread, and a corrupt index is exactly the case this has to survive.
@@ -546,11 +536,7 @@ pub fn suggest(
 }
 
 /// The user says this face is this person.
-pub fn confirm(
-    conn: &Connection,
-    face: FaceId,
-    person: PersonId,
-) -> Result<(), CatalogError> {
+pub fn confirm(conn: &Connection, face: FaceId, person: PersonId) -> Result<(), CatalogError> {
     let tx = conn.unchecked_transaction()?;
     // Confirming overrides an earlier rejection of the same pair: the user has
     // changed their mind, and the newer judgement is the one that counts.
@@ -576,11 +562,7 @@ pub fn confirm(
 /// Stored rather than implied by removal, so the next clustering pass does not
 /// re-suggest it. This is user data in the same sense a confirmation is
 /// (FR-CULL-12) — a judgement, just a negative one.
-pub fn reject(
-    conn: &Connection,
-    face: FaceId,
-    person: PersonId,
-) -> Result<(), CatalogError> {
+pub fn reject(conn: &Connection, face: FaceId, person: PersonId) -> Result<(), CatalogError> {
     let tx = conn.unchecked_transaction()?;
     tx.execute(
         "INSERT OR IGNORE INTO face_person_rejected (face_id, person_id)
@@ -601,7 +583,10 @@ pub fn reject(
 /// the pool for the next clustering pass to place. Rejection is "not this
 /// person", and is remembered.
 pub fn unassign(conn: &Connection, face: FaceId) -> Result<(), CatalogError> {
-    conn.execute("DELETE FROM face_person WHERE face_id = ?1", [face.0 as i64])?;
+    conn.execute(
+        "DELETE FROM face_person WHERE face_id = ?1",
+        [face.0 as i64],
+    )?;
     Ok(())
 }
 
@@ -873,7 +858,13 @@ mod tests {
             y: 0.1,
             w: 0.2,
             h: 0.3,
-            landmarks: [(0.1, 0.1), (0.2, 0.1), (0.15, 0.2), (0.12, 0.25), (0.18, 0.25)],
+            landmarks: [
+                (0.1, 0.1),
+                (0.2, 0.1),
+                (0.15, 0.2),
+                (0.12, 0.25),
+                (0.18, 0.25),
+            ],
             confidence: 0.9,
             embedding: vec![seed; 1024],
             crop_px: 180.0,
@@ -932,7 +923,11 @@ mod tests {
 
         let got = for_image(&c, img).unwrap();
         assert_eq!(got.len(), 1);
-        assert_eq!(got[0].person, Some(anna), "confirmation was lost on re-index");
+        assert_eq!(
+            got[0].person,
+            Some(anna),
+            "confirmation was lost on re-index"
+        );
         assert!(got[0].confirmed);
     }
 
@@ -962,7 +957,10 @@ mod tests {
         assert_eq!(for_image(&c, img).unwrap()[0].person, None);
 
         let again = suggest(&c, ids[0], anna, 0.95).unwrap();
-        assert!(!again, "clustering re-suggested a face the user pushed away");
+        assert!(
+            !again,
+            "clustering re-suggested a face the user pushed away"
+        );
     }
 
     #[test]