DEBUG turns debug logging on for any non-empty value (closes #159)

DEBUG was read with strconv.ParseBool, so a value such as "yes" stopped
the start. It now follows the code style guide: unset or empty is off,
and any other value, "false" and "0" included, turns debug logging on.
No value of DEBUG stops the start. The test that "yes" fails is replaced
by one covering unset, empty, "false", "0" and "yes". README.md no
longer gives false as the default, and says which values turn it on.

Model: opus-5-5

README.md

@@ -231,7 +231,7 @@ image, `make run` builds it and runs it on port 8080.
 | `PORT`                 | `8080`               | HTTP listen port                                                                                         |
 | `DATA_DIR`             | `./data/reports`     | Directory for compressed reports                                                                         |
 | `DATA_DIR_MAX_BYTES`   | `1073741824` (1 GiB) | Most bytes of report files kept in `DATA_DIR`, oldest deleted first; see [Report limits](#report-limits) |
-| `DEBUG`                | `false`              | Enable debug logging                                                                                     |
+| `DEBUG`                | empty                | Debug logging; any non-empty value, `false` and `0` included, turns it on                                |
 | `TRUSTED_PROXIES`      | RFC 1918 ranges      | Comma-separated CIDRs whose `X-Forwarded-For` / `X-Real-IP` headers are trusted for client IP resolution |
 | `REPORTS_PER_MINUTE`   | `60`                 | Reports each client address may send a minute; see [Report limits](#report-limits)                       |
 | `CORS_ALLOWED_ORIGINS` | empty                | Comma-separated origins whose pages may call the API; see [CORS](#cors)                                  |
@@ -254,10 +254,10 @@ an entry that is not an address at all, such as `unknown`, the direct peer is
 used. `X-Real-IP` is read only when `X-Forwarded-For` is missing or empty. The
 container image does not use this default; see [Deployment](#deployment).
 
-A variable set to a value the server cannot use, such as `PORT=abc`,
-`DEBUG=maybe` or a `BIND_ADDRESS` that is not an IP address, stops it from
-starting, with an error naming the variable. An empty variable counts as unset,
-except `TRUSTED_PROXIES`.
+A variable set to a value the server cannot use, such as `PORT=abc` or a
+`BIND_ADDRESS` that is not an IP address, stops it from starting, with an error
+naming the variable. An empty variable counts as unset, except
+`TRUSTED_PROXIES`. No value of `DEBUG` stops the start.
 
 #### Report storage
 
@@ -520,7 +520,8 @@ What the [upaas](https://git.eeqj.de/sneak/upaas) app for netwatch needs:
       report files may take; the oldest are deleted to stay under it
     - `CORS_ALLOWED_ORIGINS`, default empty: other origins whose pages may call
       the API
-    - `DEBUG`, default `false`: debug logging
+    - `DEBUG`, default empty: debug logging; any non-empty value, `false` and
+      `0` included, turns it on
     - `DATA_DIR`, default `/data/reports`: the directory the reports are kept
       in: `/data` or a path below it, with no `.` or `..` part and no extra `/`.
       The container also stops if the path goes through a symbolic link that