chore: cleanup dead code + format with Pint

- Remove unused FeaturesController (empty stubs, no routes)
- Remove ConvertSpatialFile CLI command (unused; service used in LayerManager)
- Remove MigrateGeojsonToFeatures CLI command (one-shot migration, not referenced)
- Remove .claude/worktrees/ (11 old agent worktrees from June)
- Apply Laravel Pint formatting across 219 files (style only, no functional changes)

Tests: 101 passing (319 assertions)
API routes: unchanged (8 routes intact)

bootstrap/app.php

@@ -1,8 +1,16 @@
 <?php
 
+use App\Http\Middleware\ForceHttpsScheme;
+use App\Http\Middleware\SetLocale;
 use Illuminate\Foundation\Application;
 use Illuminate\Foundation\Configuration\Exceptions;
 use Illuminate\Foundation\Configuration\Middleware;
+use Illuminate\Http\Request;
+use Laravel\Sanctum\Http\Middleware\CheckAbilities;
+use Laravel\Sanctum\Http\Middleware\CheckForAnyAbility;
+use Spatie\Permission\Middleware\PermissionMiddleware;
+use Spatie\Permission\Middleware\RoleMiddleware;
+use Spatie\Permission\Middleware\RoleOrPermissionMiddleware;
 
 return Application::configure(basePath: dirname(__DIR__))
     ->withRouting(
@@ -12,32 +20,31 @@ return Application::configure(basePath: dirname(__DIR__))
         health: '/up',
     )
     ->withMiddleware(function (Middleware $middleware): void {
-        $middleware->appendToGroup('web', \App\Http\Middleware\SetLocale::class);
+        $middleware->appendToGroup('web', SetLocale::class);
 
         // Si APP_URL es https, forzar el scheme percibido en TODAS las peticiones
         // (algunos proxies no reenvían X-Forwarded-Proto en todas las rutas, y las
         // URLs firmadas —p. ej. /livewire/upload-file— se firman con un scheme y
         // se validan con otro → 401). Debe ir ANTES de TrustProxies.
-        $middleware->prepend(\App\Http\Middleware\ForceHttpsScheme::class);
+        $middleware->prepend(ForceHttpsScheme::class);
 
         // Confiar en el proxy inverso (OpenResty/Nginx) para leer X-Forwarded-Proto:
         // sin esto, tras HTTPS el proxy Laravel genera URLs con http:// y las cookies
         // "secure" no viajan → 419 en /livewire/update.
-        $middleware->trustProxies(at: '*', headers:
-            Illuminate\Http\Request::HEADER_X_FORWARDED_FOR  |
-            Illuminate\Http\Request::HEADER_X_FORWARDED_HOST |
-            Illuminate\Http\Request::HEADER_X_FORWARDED_PORT |
-            Illuminate\Http\Request::HEADER_X_FORWARDED_PROTO |
-            Illuminate\Http\Request::HEADER_X_FORWARDED_AWS_ELB,
+        $middleware->trustProxies(at: '*', headers: Request::HEADER_X_FORWARDED_FOR |
+            Request::HEADER_X_FORWARDED_HOST |
+            Request::HEADER_X_FORWARDED_PORT |
+            Request::HEADER_X_FORWARDED_PROTO |
+            Request::HEADER_X_FORWARDED_AWS_ELB,
         );
 
         // Spatie permission + Sanctum ability middleware aliases
         $middleware->alias([
-            'role'               => \Spatie\Permission\Middleware\RoleMiddleware::class,
-            'permission'         => \Spatie\Permission\Middleware\PermissionMiddleware::class,
-            'role_or_permission' => \Spatie\Permission\Middleware\RoleOrPermissionMiddleware::class,
-            'abilities'          => \Laravel\Sanctum\Http\Middleware\CheckAbilities::class,
-            'ability'            => \Laravel\Sanctum\Http\Middleware\CheckForAnyAbility::class,
+            'role' => RoleMiddleware::class,
+            'permission' => PermissionMiddleware::class,
+            'role_or_permission' => RoleOrPermissionMiddleware::class,
+            'abilities' => CheckAbilities::class,
+            'ability' => CheckForAnyAbility::class,
         ]);
     })
     ->withExceptions(function (Exceptions $exceptions): void {