Re-vendor the canonical files from sneak/prompts at dd4027b (closes #13)

`.dockerignore`, `.gitignore`, `.golangci.yml` and the workflow are their
copies at that commit. This repo's own entries are kept after the
canonical content: the anchored `/attrsum` binary, the Go entries in
`.gitignore`, and tabs for `*.go` in the new `.editorconfig`.
`REPO_POLICIES.md` is new. The workflow keeps `fetch-depth: 0`, which the
policies require of a repo that stamps a tag-derived version.

The lint phase moves to golangci-lint v2.14.0. `script/bootstrap`
installs goimports with `go install` at its pinned commit unless the
installed binary already has the pinned version, read with
`go version -m`. It and `script/fmt` put Go's bin directory on `PATH`
first, since the CI runner's `PATH` lacks it.

Model: opus-5-5

TODO.md

@@ -17,14 +17,20 @@ have landed since the tag.
 
 # Next Step
 
-Re-vendor the canonical files from `sneak/prompts` at `dd4027b`
-(https://git.eeqj.de/sneak/attrsum/issues/13): add `REPO_POLICIES.md`
-and `.editorconfig`, refresh `.gitignore` (only the `attrsum` binary
-today), `.dockerignore`, `.gitea/workflows/check.yml` and
-`.golangci.yml`, and move the lint phase to golangci-lint v2.14.0.
+Restructure README.md into the standard sections: Description, Getting
+Started, Entrypoints, Rationale, Design, TODO, License, Author (Getting
+Started, Why?, TODO, License exist; Description, Entrypoints, Design,
+Author are missing)
 
 # Completed Steps
 
+* 2026-10-06: canonical files re-vendored from `sneak/prompts` at
+    `dd4027b`: `REPO_POLICIES.md` and `.editorconfig` added;
+    `.dockerignore`, `.gitignore`, `.golangci.yml` and the workflow
+    refreshed, keeping this repo's own entries and `fetch-depth: 0`;
+    the lint phase runs golangci-lint v2.14.0; `script/bootstrap`
+    installs goimports unless the installed one has the pinned version,
+    and it and `script/fmt` put Go's bin directory on `PATH`
 * 2026-10-06: the summary line after `sum`, `check` and `clear` prints
     the byte unit once (`1.5 KiB`, not `1.5 KiB bytes`)
 * 2026-10-06: a path that `--exclude` or `--exclude-dotfiles` excludes
@@ -64,10 +70,6 @@ today), `.dockerignore`, `.gitea/workflows/check.yml` and
 
 # Future Steps
 
-* Restructure README.md into the standard sections: Description,
-    Getting Started, Entrypoints, Rationale, Design, TODO, License,
-    Author (Getting Started, Why?, TODO, License exist; Description,
-    Entrypoints, Design, Author are missing)
 * Add a `LICENSE` file matching the README's WTFPL v2; sneak's to add,
     not an agent's
 * Tag a patch release to ship the 2026-02-02 correctness fixes