chore: replace em dashes with hyphens, add no-em-dash rule to CLAUDE.md

models/instance.go

@@ -13,7 +13,7 @@ import (
 // keys, workflows, monitors and secrets. It is the unit a licence attaches to.
 //
 // A paying customer may hold several. That grouping is called an Account and
-// lives only in the admin control plane — this service never sees it.
+// lives only in the admin control plane - this service never sees it.
 type Instance struct {
 	ID         bson.ObjectID `bson:"_id,omitempty" json:"_id,omitempty"`
 	InstanceID string        `bson:"instance_id" json:"instance_id"`

models/settings.go

@@ -31,7 +31,7 @@ type Settings struct {
 
 	// LocalLoginEnabled is a pointer because it is absent on every settings
 	// document written before this feature existed, and a plain bool would read
-	// absent as disabled — turning off password login for the entire fleet at
+	// absent as disabled - turning off password login for the entire fleet at
 	// upgrade. Nil means enabled.
 	LocalLoginEnabled *bool `bson:"local_login_enabled,omitempty" json:"local_login_enabled,omitempty"`
 
@@ -43,7 +43,7 @@ type Settings struct {
 	// APITokenMaxDays caps how long a newly created API token may live.
 	//
 	// A pointer for the same reason the retention fields are: absent must mean
-	// the default, and the default here is no cap at all — never-expire tokens
+	// the default, and the default here is no cap at all - never-expire tokens
 	// are allowed until an instance decides otherwise, so an upgrade changes
 	// nothing. Nil or 0 is no cap. A positive value refuses both a longer
 	// expiry and a token with no expiry.

models/user.go

@@ -26,7 +26,7 @@ const (
 	AuthOIDC  = "oidc"
 	// AuthHQ marks a user projected from a Vantage HQ account. Its role,
 	// password and existence are owned by HQ, and the instance API refuses to
-	// change any of them locally — a role editable in two places is a role with
+	// change any of them locally - a role editable in two places is a role with
 	// two answers.
 	AuthHQ = "hq"
 )