[antoinetoussaint-byte]

What this fixes

main at 061b7ad is red on Go lint (module/services/accounts/code) and Go lint (module/services/store/code). The job introduced in #1297 was clean at its own head; #1298 (accounts) and #1295 (store) merged test code written before that job existed. golangci-lint v2.14.0 reports three errcheck findings, all in tests:

File	Finding	Fix
module/services/accounts/code/pkg/adapters/rpc_policy_denied_test.go:95	recordPolicyDenial return dropped	assert it, as lines 77–79 and 114 of the same file already do: the function passes the refusal through unchanged
module/services/store/code/migration_65_scope_settings_test.go:93	defer runner.Close() unchecked	defer func() { _, _ = runner.Close() }(), the idiom every other migration_*_test.go in the package uses
module/services/store/code/migration_65_scope_settings_test.go:164	defer rows.Close() unchecked	defer func() { _ = rows.Close() }(), as migration_upgrade_test.go does

Classification: fix, at the place that owns the behaviour

No .golangci.yml exclusion widened, no //nolint. None of the three is a false positive. Three lines changed, nothing refactored.

Verified

• golangci-lint run --path-mode=abs --max-issues-per-linter=0 --max-same-issues=0 with GOWORK=off, golangci-lint v2.14.0 built with go1.27.3 (the CI job's exact version and install mode), in both module directories: 0 issues each.
• go vet on both edited packages: clean.
• Not run locally: the Postgres-backed store migration test and the accounts suite; the change in both is a deferred-close idiom and an added equality assertion on a value the sibling tests already assert, and CI runs them.

Unblocks the v0.0.116 deploy-counter tag, which RELEASE_GATES.md only allows on an all-green main.

🤖 Generated with Claude Code