chore: replace em dashes with hyphens, add no-em-dash rule to CLAUDE.md

internal/cmd/inspect.go

@@ -39,7 +39,7 @@ func renderManifest(w io.Writer, m backup.Manifest) {
 	fmt.Fprintf(w, "Format        version %d\n", m.FormatVersion)
 
 	if m.KeyFingerprint == nil {
-		fmt.Fprintf(w, "Key           none recorded — this archive cannot be checked "+
+		fmt.Fprintf(w, "Key           none recorded - this archive cannot be checked "+
 			"against any KEY_ENCRYPTION_KEY\n")
 	} else {
 		fmt.Fprintf(w, "Key           %s\n", *m.KeyFingerprint)

internal/cmd/restore.go

@@ -102,8 +102,8 @@ func newRestoreCmd() *cobra.Command {
 
 // confirmDestruction gates a --force restore.
 //
-// On a terminal the operator types the database name. Without one — a
-// Kubernetes Job, a CI step, a cron entry — the same assurance comes from
+// On a terminal the operator types the database name. Without one - a
+// Kubernetes Job, a CI step, a cron entry - the same assurance comes from
 // --confirm-db, whose value must equal the target. Naming the database in the
 // argument means a copy-pasted command carries its intended target with it and
 // cannot destroy a different one.

internal/cmd/verify.go

@@ -31,8 +31,8 @@ func newVerifyCmd() *cobra.Command {
 			}
 			defer archive.Close()
 
-			// The key is read unconditionally. Archive-only mode — no MONGO_URI,
-			// which is what a scheduled check uses — must still compare the key
+			// The key is read unconditionally. Archive-only mode - no MONGO_URI,
+			// which is what a scheduled check uses - must still compare the key
 			// in hand against the archive's fingerprint; leaving it unset there
 			// reported "KEY_ENCRYPTION_KEY is not set" for a key that was set
 			// and correct.