docs: fix duplicate Architecture heading and remove unimplemented SANFormat param

- Remove redundant '## Architecture' heading from configuration.md before
  the architecture.md include (pre-rendered file already starts with that heading)
- Remove SANFormat from the enrollment parameters table (not implemented)

Author: spbsoluble

docsource/configuration.md

@@ -135,7 +135,6 @@ In the Keyfactor Command Management Portal, navigate to **Certificate Templates*
 | `RenewalWindowDays` | Optional | Number | Number of days before certificate expiration within which a renewal is attempted instead of a reissue. Default: `90`. | `90` |
 | `KeyType` | Optional | String | Key algorithm to request at enrollment time. Valid values depend on what the target product supports. If omitted, the product default is used. | `RSA2048`, `RSA4096`, `EC256`, `EC384` |
 | `DomainName` | Optional | String | Primary domain name for SSL/TLS orders. If omitted, the gateway derives the domain from the CSR `CN` field. | `example.com` |
-| `SANFormat` | Optional | String | Controls how Subject Alternative Names from the CSR are formatted in the order request. Refer to plugin documentation for valid values. | *(see plugin docs)* |
 | `SignerName` | Optional | String | Per-template override for the subscriber agreement signer name. When omitted, defaults to the connector-level `RequestorName`. | `Jane Smith` |
 | `SignerPlace` | Optional | String | Per-template override for the subscriber agreement signer location. When omitted, defaults to the connector-level `SignerPlace`. | `Austin` |
 | `SignerIp` | Optional | String | Per-template override for the subscriber agreement signer IP address. When omitted, defaults to the connector-level `SignerIp`. | `203.0.113.10` |
@@ -242,6 +241,4 @@ When an enrollment request arrives, the numeric CERTInext product code is resolv
 
 If none of these yield a code, enrollment fails with a validation error.
 
-## Architecture
-
 {% include 'architecture.md' %}