style(windows): clang-format the threaded ancestor signatures

CI lint flagged two continuation lines from the previous commit. Formatting
collapsed the runtime-directory call onto one line, so the contract pin that
asserted ancestor=false there stopped matching; the pin now keys on the
formatted text. Both revert directions re-verified: capability-only fails, and
relaxing the runtime directory to ancestor=true fails.

Signed-off-by: Martin Vogel <martin.vogel.tech@gmail.com>

src/daemon/ipc.c

@@ -4120,7 +4120,7 @@ static bool win_file_acl_secure(win_security_t *security, HANDLE file, DWORD mut
         size_t sid_capacity = (size_t)header->AceSize - sid_offset;
         bool creator_owner_inherit_only = (header->AceFlags & INHERIT_ONLY_ACE) != 0U;
         if (!win_bounded_sid_trusted(security, sid, sid_capacity, creator_owner_inherit_only,
-                                    ancestor)) {
+                                     ancestor)) {
             /* Name the untrusted identity class so a harness/profile ACL leak
              * (an inherited Users / Authenticated Users / Everyone ACE) is
              * distinguishable from a genuinely hostile grant. */
@@ -4219,8 +4219,7 @@ static bool win_runtime_directory_secure(const wchar_t *runtime_dir) {
     }
     bool final_private =
         secure_result == ERROR_SUCCESS &&
-        win_file_security_secure(&security, directory, true, win_private_mutation_rights(),
-                                false);
+        win_file_security_secure(&security, directory, true, win_private_mutation_rights(), false);
     (void)CloseHandle(directory);
     win_security_destroy(&security);
     return valid_handle && owner_ok && final_private;

tests/test_windows_bundle_contract.sh

@@ -446,7 +446,7 @@ require(
             # APP_PACKAGE identifier authority
             "sid[7] != 15U",
             # the private runtime directory is validated with ancestor=false
-            "win_private_mutation_rights(),\n                                false)",
+            "win_private_mutation_rights(), false)",
         )
     ),
     "AppContainer SIDs must be tolerated on ancestors ONLY, covering both package "