docs: catch the last Fiber v2 declarations

Round-2 review found the sweep had still missed the package godoc
(internal/web/doc.go, the surface pkg.go.dev renders), docs/INDEX.md
and cmd/AGENTS.md; a repo-wide grep now finds zero live Fiber v2
claims (dated plan archives under docs/superpowers/ excepted). Also
aligns the AGENTS.md CSRF example with the real config
(extractors.FromForm, not FromHeader), plus the touched files'
pre-existing markdownlint findings.

Assisted-by: claude-code:claude-fable-5
Agent-Session: https://claude.ai/code/session_01L7tF9XuJfAfFk4yuY5KfPK
Agent-Host: 0493f0
Signed-off-by: Sebastian Mendel <info@sebastianmendel.de>

Author: CybotTM

cmd/AGENTS.md

@@ -4,11 +4,12 @@
 
 ## Overview
 
-The `cmd/` directory contains the main entry point for the LDAP Manager application. This follows Go's standard project layout for executable binaries.
+The `cmd/` directory contains the main entry point for the LDAP Manager application. This follows Go's standard
+project layout for executable binaries.
 
 - **Location**: `cmd/ldap-manager/main.go`
 - **Purpose**: CLI initialization, configuration parsing, server startup
-- **Framework**: Uses Fiber v2 web framework via `internal/web` package
+- **Framework**: Uses Fiber v3 web framework via `internal/web` package
 
 ## Setup & Environment
 

docs/INDEX.md

@@ -135,7 +135,8 @@ Comprehensive technical analysis and session documentation (21 reports):
 | [**Frontend Analysis**](../claudedocs/comprehensive-frontend-analysis.md) | Complete frontend architecture review        | 2025-09-30   |
 | [**CSS Analysis**](../claudedocs/css-analysis.md)                         | CSS structure and optimization opportunities | 2025-09-30   |
 
-**Purpose:** These reports provide deep technical insights for developers, architects, and operations teams. Generated during development sessions for knowledge preservation and decision documentation.
+**Purpose:** These reports provide deep technical insights for developers, architects, and operations teams. Generated
+during development sessions for knowledge preservation and decision documentation.
 
 ---
 
@@ -250,7 +251,7 @@ LDAP_POOL_HEALTH_CHECK_INTERVAL=30s
 
 ## 🏗️ Project Structure
 
-```
+```text
 ldap-manager/
 ├── cmd/ldap-manager/        # Application entry point
 ├── internal/                 # Core application code
@@ -337,27 +338,28 @@ Current project health indicators:
 
 ### Official Documentation
 
-- **Go:** https://go.dev/doc/
-- **Fiber v2:** https://docs.gofiber.io/
-- **Templ:** https://templ.guide/
-- **TailwindCSS:** https://tailwindcss.com/docs
-- **go-ldap:** https://pkg.go.dev/github.com/go-ldap/ldap/v3
+- **Go:** <https://go.dev/doc/>
+- **Fiber v3:** <https://docs.gofiber.io/>
+- **Templ:** <https://templ.guide/>
+- **TailwindCSS:** <https://tailwindcss.com/docs>
+- **go-ldap:** <https://pkg.go.dev/github.com/go-ldap/ldap/v3>
 
 ### Related Projects
 
 - **simple-ldap-go v1.5.0:** Custom LDAP wrapper with indexed cache
-  - **Our Contribution:** [PR #45](https://github.com/netresearch/simple-ldap-go/pull/45) - Multi-key indexed cache (287x improvement)
+  - **Our Contribution:** [PR #45](https://github.com/netresearch/simple-ldap-go/pull/45) - Multi-key indexed cache
+(287x improvement)
   - **Status:** Merged and released in v1.5.0
-  - **GitHub:** https://github.com/netresearch/simple-ldap-go
+  - **GitHub:** <https://github.com/netresearch/simple-ldap-go>
 - **BBolt:** Embedded key-value database for sessions
   - **Use Case:** Persistent session storage for development and production
-  - **GitHub:** https://github.com/etcd-io/bbolt
+  - **GitHub:** <https://github.com/etcd-io/bbolt>
 
 ---
 
 ## 🆘 Getting Help
 
-### Documentation Not Found?
+### Documentation Not Found
 
 1. **Check AGENTS.md:** AI guidelines may have what you need
 2. **Search codebase:** `grep -r "pattern" internal/`
@@ -450,6 +452,7 @@ Potential future enhancements (not committed):
 
 ---
 
-_This index is maintained automatically and manually. Last comprehensive update: 2025-09-30 (Enhanced with PR #267 details, claudedocs integration, and API module reference)_
+This index is maintained automatically and manually. Last comprehensive update: 2025-09-30 (Enhanced with PR #267
+details, claudedocs integration, and API module reference)
 
 **📌 Bookmark this page** - it's your hub for all LDAP Manager documentation.

internal/web/AGENTS.md

@@ -221,7 +221,7 @@ if err := validate.Struct(req); err != nil {
 ```go
 // CSRF middleware enabled for state-changing operations
 app.Use(csrf.New(csrf.Config{
-    Extractor:      extractors.FromHeader("X-CSRF-Token"),
+    Extractor:      extractors.FromForm("csrf_token"), // matches createCSRFConfig in server.go
     CookieName:     "csrf_",
     CookieSameSite: "Strict",
     IdleTimeout:    1 * time.Hour,

internal/web/doc.go

@@ -1,6 +1,6 @@
 // Package web provides the HTTP server and web interface for LDAP Manager.
 //
-// This package implements a complete web application using the Fiber v2 framework,
+// This package implements a complete web application using the Fiber v3 framework,
 // providing HTTP handlers, middleware, session management, template rendering,
 // and static asset serving for LDAP directory management operations.
 //