Re-vendor the canonical files from sneak/prompts at dd4027b (closes #13)

`.dockerignore`, `.gitignore`, `.golangci.yml` and the workflow are their
copies at that commit. This repo's own entries are kept after the
canonical content: the anchored `/attrsum` binary, the Go entries in
`.gitignore`, and tabs for `*.go` in the new `.editorconfig`.
`REPO_POLICIES.md` is new. The workflow keeps `fetch-depth: 0`, which the
policies require of a repo that stamps a tag-derived version.

The lint phase moves to golangci-lint v2.14.0, which finds nothing in
the code. `script/fmt` now runs goimports with `go run` at its pinned
commit. A version-checked install by `script/bootstrap` would have to be
found on `PATH`, and the CI runner's `PATH` lacks Go's bin directory.

Model: opus-5-5

TODO.md

@@ -31,6 +31,8 @@ Author are missing)
     the lint phase runs golangci-lint v2.14.0; `script/fmt` runs
     goimports with `go run` at its pinned commit instead of
     `script/bootstrap` installing it
+* 2026-10-06: the summary line after `sum`, `check` and `clear` prints
+    the byte unit once (`1.5 KiB`, not `1.5 KiB bytes`)
 * 2026-10-06: a path that `--exclude` or `--exclude-dotfiles` excludes
     is skipped even when it cannot be read, so an excluded directory
     that cannot be listed no longer fails the run

attrsum.go

@@ -71,13 +71,13 @@ func (s *Stats) Duration() time.Duration {
 	return time.Since(s.StartTime)
 }
 
-func (s *Stats) Print(opts *options, operation string) {
+func (s *Stats) Print(w io.Writer, opts *options, operation string) {
 	if opts.quiet {
 		return
 	}
 
-	fmt.Fprintf(os.Stderr,
+	_, _ = fmt.Fprintf(w,
-		"\n%s complete: %d files processed, %d skipped, %d failed, %s bytes in %s\n",
+		"\n%s complete: %d files processed, %d skipped, %d failed, %s in %s\n",
 		operation,
 		s.FilesProcessed,
 		s.FilesSkipped,
@@ -227,7 +227,7 @@ func runOverPaths(
 	}
 
 	finishBar(bar)
-	stats.Print(opts, op)
+	stats.Print(os.Stderr, opts, op)
 
 	return nil
 }
@@ -481,7 +481,7 @@ func runCheck(opts *options, args []string, cont bool) error {
 		if perr != nil {
 			if !cont {
 				finishBar(bar)
-				stats.Print(opts, "check")
+				stats.Print(os.Stderr, opts, "check")
 
 				return perr
 			}
@@ -491,7 +491,7 @@ func runCheck(opts *options, args []string, cont bool) error {
 	}
 
 	finishBar(bar)
-	stats.Print(opts, "check")
+	stats.Print(os.Stderr, opts, "check")
 
 	return finalErr
 }

attrsum_test.go

@@ -1,6 +1,7 @@
 package main
 
 import (
+	"bytes"
 	"errors"
 	"os"
 	"path/filepath"
@@ -376,3 +377,27 @@ func TestCheckContinuePastUnreadable(t *testing.T) {
 		t.Fatalf("expected verification error from runCheck, got %v", err)
 	}
 }
+
+func TestSummaryPrintsByteUnitOnce(t *testing.T) {
+	t.Parallel()
+
+	tests := []struct {
+		bytesProcessed int64
+		want           string
+	}{
+		{9, ", 9 B in "},
+		{1536, ", 1.5 KiB in "},
+	}
+
+	for _, tt := range tests {
+		var out bytes.Buffer
+
+		stats := newTestStats()
+		stats.BytesProcessed = tt.bytesProcessed
+		stats.Print(&out, &options{}, "check")
+
+		if !strings.Contains(out.String(), tt.want) {
+			t.Errorf("summary %q does not contain %q", out.String(), tt.want)
+		}
+	}
+}