[AZ-372] Apply dotnet format whitespace cleanup; archive batch 22

Pure whitespace-only cleanup uncovered by the new format gate from the
previous commit. Verified via `git diff -w --stat`: only 4 files differ
when whitespace is ignored, and those differ only by the BOM byte.

Cleanup kinds applied across 22 source files:
- BOM removal (MapConfig.cs, SatTile.cs, GeoUtils.cs,
  IntegrationTests/Program.cs)
- CRLF -> LF (IntegrationTests/Program.cs)
- Trailing whitespace on blank lines (Common, Api, DataAccess,
  IntegrationTests, Services.RegionProcessing,
  Services.TileDownloader)
- Final newline added (RoutePoint.cs, GeoPoint.cs, others)

After this commit `dotnet format whitespace SatelliteProvider.sln
--verify-no-changes` exits 0; AC-1 is enforceable from `scripts/
run-tests.sh` going forward.

Also lands the batch 22 report, code-review report
(PASS_WITH_WARNINGS, 2 Low findings — both deferred per spec),
dependency-table status update (AZ-372 -> Done (In Testing)), task
archive (todo/ -> done/), and autodev state update.

Co-authored-by: Cursor <cursoragent@cursor.com>

_docs/03_implementation/reviews/batch_22_review.md

@@ -0,0 +1,122 @@
+# Code Review Report — Batch 22
+
+**Batch**: 22 (AZ-372 — C19 dotnet format + NetAnalyzers + Coverlet tooling)
+**Date**: 2026-05-11
+**Run**: `03-code-quality-refactoring`
+**Cycle**: 1
+**Verdict**: PASS_WITH_WARNINGS — 2 Low findings (both informational)
+
+## 1. Context Loading
+
+Inputs:
+
+- Task spec: `_docs/02_tasks/todo/AZ-372_refactor_format_analyzers_coverage.md`
+- Change entry: `_docs/04_refactoring/03-code-quality-refactoring/list-of-changes.md` (C19)
+- Project restrictions: `_docs/00_problem/restrictions.md` (no impact on tooling)
+- Module layout: `_docs/02_document/module-layout.md` (no component boundary affected — this is a workspace-root tooling change)
+- Last cumulative review: `cumulative_review_batches_19-21_cycle1_report.md` (PASS_WITH_WARNINGS, F1/F2 deferred to Phase 7 — Documentation)
+
+Intent: wire `.editorconfig` + `Directory.Build.props` so `dotnet format --verify-no-changes` gates the test script; turn on a small NetAnalyzers ruleset at warning severity; wire Coverlet into the unit-test invocation.
+
+## 2. Spec Compliance
+
+| AC | Verified by | Status |
+|----|-------------|--------|
+| AC-1 (`dotnet format --verify-no-changes` succeeds) | `RunTestsScript_WiresFormatVerify_AZ372_AC1` + runtime verification: `dotnet format whitespace SatelliteProvider.sln --verify-no-changes` now exits 0 against the post-cleanup tree. | ✓ |
+| AC-2 (coverage produced) | `RunTestsScript_CollectsCoverage_AZ372_AC2` + `TestProject_ReferencesCoverletCollector_AZ372_AC2`. Script now invokes `dotnet test … --collect:"XPlat Code Coverage" --results-directory /src/TestResults`. | ✓ |
+| AC-3 (analyzers active but non-blocking) | `EditorConfig_DefinesInitialAnalyzerRuleset_AZ372_AC3` + `DirectoryBuildProps_ExistsAtRoot_AZ372_AC3`. Runtime confirmation: `dotnet format` produced 8 visible warning-level findings (4× CA2227, 1× CA1001, 2× CA1816, 2× xUnit1031) — build still succeeds, no warning promoted to error. | ✓ |
+| AC-4 (tests stay green) | Local Docker unit-test run: **181/181 passing** (was 175 + 6 new = 181). Smoke run handed off to test-run skill per implement Step 16. | ✓ |
+
+**Note on AC-4 count drift**: the spec phrases AC-4 as "37 unit + 5 smoke tests stay green". The 37/5 numbers are pre-`/document` snapshots; the actual unit count is 181 (acknowledged in `cumulative_review_batches_19-21_cycle1_report.md`). Captured as F1 (Low, informational) — the spirit (all tests green) is satisfied. No change required.
+
+## 3. Code Quality
+
+- **SRP**: `.editorconfig` and `Directory.Build.props` are single-purpose tooling configs; `ToolingConfigurationTests.cs` is a single-class file with one private helper. `scripts/run-tests.sh` argument parsing was refactored from a single-arg `case` to a `for arg` loop so a second flag (`--skip-format`) can coexist with the mode flag — strict superset of prior behavior.
+- **Error handling**: format check exits 4 (distinct from existing exit codes 2/3) with a clear next-step message; tests use FluentAssertions descriptive `.Should()` calls; no bare catch; no swallowed errors.
+- **Naming**: every new identifier is intent-revealing — `EnableNETAnalyzers`, `AnalysisLevel`, `AnalysisMode`, `EnforceCodeStyleInBuild`, `LocateRepoFile`, `--skip-format`.
+- **Complexity**: no method > 15 LOC; helper `LocateRepoFile` is the same parent-walk pattern as `AcceptanceCriteriaRT2Tests.LocateAcceptanceCriteriaMd` — consistent.
+- **DRY**: `LocateRepoFile` consolidates the path-resolution logic that the existing `LocateAcceptanceCriteriaMd` already encodes; both helpers are now within the same test project. Promotion to a shared test helper is deferred (would only be worth it once we have 3+ uses).
+- **Test quality**: 6 new tests, each asserts a specific marker in a specific file (root-relative). No "no error thrown"-only tests. Arrange/Act/Assert structure (Act + Assert combined where appropriate, as `coderule.mdc` allows).
+- **Static-vs-instance**: `LocateRepoFile` is `static` — pure self-contained path computation, matches `coderule.mdc` ("pure self-contained computations").
+- **Whitespace cleanup**: 22 source files were modified by `dotnet format whitespace`. Verified via `git diff -w --stat` — only 4 files differ when whitespace is ignored, and those 4 differ only by the BOM byte. No logic, identifiers, or behavior changed.
+
+No code-quality finding.
+
+## 4. Security Quick-Scan
+
+- No new SQL building, no string interpolation, no `Process.Start`, no `eval`-equivalent.
+- No new credentials. The `--skip-format` flag is an opt-out for the CI gate and is documented; no security impact.
+- The `scripts/run-tests.sh` arg loop validates `--skip-format` explicitly and rejects unknown args via the existing `*) … exit 2` fallback — no shell injection surface added.
+- No new external input handling.
+
+No security finding.
+
+## 5. Performance Scan
+
+- The format-check step adds one Docker run (~5–10 s startup + scan) at the start of every `scripts/run-tests.sh` invocation. Acceptable for a CI quality gate; bypassable via `--skip-format` for local emergency runs.
+- `dotnet test --collect:"XPlat Code Coverage"` adds Coverlet instrumentation. The local Docker test run completed in 2.2 s (181 tests), no measurable regression vs. uninstrumented runs.
+- No new I/O, no new DB calls, no new HTTP calls.
+
+No performance finding.
+
+## 6. Cross-Task Consistency
+
+Single-task batch. Consistency vs. prior batches in this run:
+
+- **Test convention**: new tests use xUnit + FluentAssertions + the existing `AZ372_ACn` naming convention introduced by AZ-371 (b18) and consistently used since.
+- **DI / configuration**: no new DI registrations. `Directory.Build.props` is an MSBuild-level concern — applies once at build time, not per-component DI.
+- **File ownership**: this is a workspace-root tooling task; OWNED = `.editorconfig`, `Directory.Build.props`, `scripts/run-tests.sh`, `.gitignore`, `SatelliteProvider.Tests/ToolingConfigurationTests.cs`. The 22 whitespace-only source changes are explicitly within scope of the C19 spec ("Run formatter once and commit any whitespace cleanup as a separate batch" — folded into this batch as a no-op cleanup to keep the format gate green from the first invocation).
+
+## 7. Architecture Compliance
+
+- **Layer direction**: `.editorconfig` and `Directory.Build.props` are workspace-root artifacts — no layer affected. `ToolingConfigurationTests.cs` lives in `SatelliteProvider.Tests/` (Layer-3 test project), which already has ProjectReferences to every component — consistent with existing test layout.
+- **Public API respect**: no new cross-component imports.
+- **No new cycles**: the module DAG is unchanged.
+- **Duplicate symbols**: none. `LocateRepoFile` shadows no other symbol (private static helper inside `ToolingConfigurationTests`).
+- **Cross-cutting concerns**: `.editorconfig` and `Directory.Build.props` are the canonical cross-cutting tooling configs; correctly placed at the workspace root (not duplicated per-component).
+- **Public API growth**: zero. No new public types in any component.
+
+## 8. Baseline Delta
+
+| Bucket | Count | Notes |
+|--------|-------|-------|
+| Carried over | 0 | All baseline findings already resolved. |
+| Resolved | 0 | None to resolve in this batch. |
+| Newly introduced | 0 | This batch introduces no Architecture-category findings. |
+
+## 9. Findings
+
+| # | Severity | Category | File:Line | Title |
+|---|----------|----------|-----------|-------|
+| F1 | Low | Spec-Gap | `_docs/02_tasks/todo/AZ-372_refactor_format_analyzers_coverage.md:21,57` | AC-4 count text is stale (37 → 181) |
+| F2 | Low | Maintainability | (multiple) | NetAnalyzer warnings surface real issues — track for follow-up |
+
+### Finding Details
+
+**F1: AC-4 count text is stale (37 → 181)** (Low / Spec-Gap)
+- Location: `_docs/02_tasks/todo/AZ-372_refactor_format_analyzers_coverage.md` (Outcome bullet 4; AC-4 body)
+- Description: AC-4 reads "37 unit + 5 smoke tests stay green". Actual count when AZ-372 was authored has since grown to 181 unit + 5 smoke (verified by local run). The cumulative review of batches 19–21 already noted this drift category.
+- Impact: Cosmetic; the AC's spirit (no test regressions) is verifiable independent of the literal count.
+- Suggestion: Either re-phrase ACs that quote counts to use "all" instead of an absolute number, or update them in the same refactor-Phase-7 documentation sweep that the prior cumulative review flagged. Captured here so the Phase 7 sweep does not miss it.
+- Task: AZ-372.
+
+**F2: NetAnalyzer warnings surface real issues — track for follow-up** (Low / Maintainability)
+- Location: 8 occurrences across the codebase:
+  - `SatelliteProvider.Common/DTO/CreateRouteRequest.cs:13` — CA2227 (`Points` collection setter)
+  - `SatelliteProvider.Common/DTO/GeofencePolygon.cs:17` — CA2227 (`Polygons`)
+  - `SatelliteProvider.Common/DTO/GetSatelliteTilesResponse.cs:5` — CA2227 (`Tiles`)
+  - `SatelliteProvider.Common/DTO/RouteResponse.cs:12` — CA2227 (`Points`)
+  - `SatelliteProvider.Services.TileDownloader/GoogleMapsDownloaderV2.cs:14` — CA1001 (owns `_downloadSemaphore`, type isn't `IDisposable`)
+  - `SatelliteProvider.Tests/RegionServiceTests.cs:26` — CA1816 (`Dispose` without `GC.SuppressFinalize`)
+  - `SatelliteProvider.Tests/TileCsvWriterTests.cs:16` — CA1816 (same)
+  - `SatelliteProvider.Tests/TileServiceTests.cs:204,229` — xUnit1031 (blocking `.Result` in test)
+- Description: With the initial CA1001/CA1051/CA1816/CA2227 ruleset now active at warning severity, the analyzers surface 8 actionable issues. AC-3 specifically calls for these warnings to be **visible but non-blocking**, so the current state matches the AC. The 8 findings each represent a small follow-up: 4 DTO setters that should be `get;` only (or use `init`), 1 missing `IDisposable` on a semaphore-owning type, 2 `Dispose` patterns missing `GC.SuppressFinalize`, 2 blocking `.Result` calls in tests.
+- Impact: Build output is now noisier than before by 8 lines (by design). No runtime impact, no test failures.
+- Suggestion: Defer to a small dedicated follow-up ticket (one per CA family, or a single grouped ticket) once Phase 7 (Documentation) lands. The C19 spec explicitly defers fixing these to "later runs" ("start with a small named ruleset and expand later"). Not part of AZ-372 scope.
+- Task: AZ-372 (out-of-scope by design).
+
+Both findings are Low. Verdict logic: only Low → **PASS_WITH_WARNINGS**.
+
+## 10. Verdict
+
+**PASS_WITH_WARNINGS**. Auto-fix gate is bypassed (no Critical/High findings). Both Low findings are informational and out of AZ-372's stated scope. Proceed to commit + push (auto-push enabled) → tracker transition → archive task → loop to next batch.