fix(format): prettier drift in 2 docs (pre-existing, caught by format:check)

No content change — markdown list-marker/line-wrap normalization only.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

docs/project/backlog/WP-53-inbound-identity-and-citizen-scoping.md

@@ -115,8 +115,8 @@ session sync (CLAUDE.md out-of-scope list).
 ## Risks
 
 - Missing a `DemoOwner` call site → a citizen sees another's data. Mitigated: grep gate (clean)
-  + `ApplicationTests.Applications_are_scoped_to_the_caller_bsn` (two `X-Subject` identities,
-  HTTP end-to-end) proving neither sees the other's cases.
+  - `ApplicationTests.Applications_are_scoped_to_the_caller_bsn` (two `X-Subject` identities,
+    HTTP end-to-end) proving neither sees the other's cases.
 - ZGW rol filter param name is exact and version-sensitive; asserted in
   `OpenZaakZaakSourceTests.ListMyCases_filters_by_the_callers_bsn`.
 

docs/reference/openzaak-integration.md

@@ -173,7 +173,7 @@ CallerIdentity.cs`):
   existing admin-only `ListCases(now)`. `LocalZaakSource` filters `ApplicationStore.List(bsn)`
   (unchanged local behaviour); `OpenZaakZaakSource` appends ZGW's
   `rol__betrokkeneIdentificatie__natuurlijkPersoon__inpBsn=<bsn>` query filter to `GET
-  {ZrcBaseUrl}/zaken`. `GET /applications` (the citizen's own dashboard) now routes through this
+{ZrcBaseUrl}/zaken`. `GET /applications` (the citizen's own dashboard) now routes through this
   instead of calling `ApplicationStore` directly — the last "reads a static store directly" gap
   the ACL caveat below used to flag for a citizen-facing endpoint.