feat: add organization-level certificate toggle and update tower-governor imports

services/cms-service/migrations/20260414000001_add_certificate_toggle.sql

@@ -4,5 +4,11 @@
 ALTER TABLE organization_exercise_settings
     ADD COLUMN IF NOT EXISTS certificates_enabled BOOLEAN NOT NULL DEFAULT TRUE;
 
+ALTER TABLE organizations
+    ADD COLUMN IF NOT EXISTS certificates_enabled BOOLEAN NOT NULL DEFAULT TRUE;
+
 COMMENT ON COLUMN organization_exercise_settings.certificates_enabled 
     IS 'Enable/disable built-in certificate generation. When false, students cannot generate/download certificates from the platform.';
+
+COMMENT ON COLUMN organizations.certificates_enabled 
+    IS 'Enable/disable built-in certificate generation. When false, students cannot generate/download certificates from the platform.';

services/cms-service/src/main.rs

@@ -161,7 +161,8 @@ async fn main() {
         ])
         .expose_headers([header::CONTENT_LENGTH, header::CONTENT_TYPE, header::CONTENT_RANGE, header::ACCEPT_RANGES]);
 
-    use tower_governor::{GovernorConfigBuilder, GovernorLayer};
+    use tower_governor::governor::GovernorConfigBuilder;
+    use tower_governor::GovernorLayer;
     use std::sync::Arc;
 
     let governor_conf = Arc::new(

services/lms-service/src/main.rs

@@ -119,7 +119,8 @@ async fn main() {
         ])
         .expose_headers([header::CONTENT_LENGTH, header::CONTENT_TYPE]);
 
-    use tower_governor::{GovernorConfigBuilder, GovernorLayer};
+    use tower_governor::governor::GovernorConfigBuilder;
+    use tower_governor::GovernorLayer;
     use std::sync::Arc;
 
     let governor_conf = Arc::new(