Unit-run canteens are beyond CAG’s purview