Fix gosec, govet, and errorlint linter errors

Co-authored-by: Junie <junie@jetbrains.com>

internal/engine/ca/ca.go

@@ -42,13 +42,13 @@ type issuerState struct {
 
 // CAEngine implements the CA (PKI) engine.
 type CAEngine struct {
-	mu        sync.RWMutex
 	barrier   barrier.Barrier
-	mountPath string
+	rootKey   crypto.PrivateKey
 	config    *CAConfig
 	rootCert  *x509.Certificate
-	rootKey   crypto.PrivateKey
 	issuers   map[string]*issuerState
+	mountPath string
+	mu        sync.RWMutex
 }
 
 // NewCAEngine creates a new CA engine instance.
@@ -788,13 +788,13 @@ func (e *CAEngine) handleIssue(ctx context.Context, req *engine.Request) (*engin
 
 	return &engine.Response{
 		Data: map[string]interface{}{
-			"serial":    serial,
-			"cert_pem":  string(leafCertPEM),
-			"key_pem":   string(leafKeyPEM),
-			"chain_pem": string(chainPEM),
-			"cn":        cn,
-			"sans":      allSANs,
-			"issued_by": req.CallerInfo.Username,
+			"serial":     serial,
+			"cert_pem":   string(leafCertPEM),
+			"key_pem":    string(leafKeyPEM),
+			"chain_pem":  string(chainPEM),
+			"cn":         cn,
+			"sans":       allSANs,
+			"issued_by":  req.CallerInfo.Username,
 			"expires_at": leafCert.NotAfter,
 		},
 	}, nil