Re-vendor the shared files from sneak/prompts at dd4027b (closes #113)

The shared files are the sneak/prompts copies at dd4027b, with this
repository's own entries after them. make lint and make test each build
one Dockerfile phase without the cache, both covering the frontend
through a node stage; the builder stage waits on both and takes its
version from git describe unless VERSION is given. golangci-lint moves
to v2.14.0 with the new .golangci.yml; one test spells X-Request-ID as
canonicalheader asks. prettier formats only JavaScript, CSS, HTML and
Markdown, so .golangci.yml stays as fetched. script/fmt and
script/fmt-check put ~/.local/bin on PATH, which the shared workflow no
longer does. script/bootstrap keeps a Go only if it is exactly
GO_VERSION, and re-checks the go on PATH after installing.

Model: opus-5-5

.dockerignore

@@ -71,11 +71,10 @@
 **/.vscode
 **/*.sublime-*
 
-# This repository's own entries, after the shared content above: the
-# frontend build, the viewport test's output, what `make build` and
-# `make run` in backend/ leave behind, and log files at the root.
+# This repository's own host-built artifacts, after the shared content
+# above: the frontend build, the viewport test's output, and what
+# `make build` and `make run` in backend/ leave behind.
 /dist
 /tmp
 /backend/netwatch-server
 /backend/data
-/*.log

README.md

@@ -41,12 +41,12 @@ halves, so the root `make check` fails if either one is broken. We provide:
 
 - `script/bootstrap` — install all dependencies (the pinned node via nvm unless
   one new enough for the frontend's dependencies is installed, yarn via
-  corepack, `yarn install --frozen-lockfile`, Go `GO_VERSION` unless the `go` on
-  `PATH` is exactly that version, the Go modules, and gcc with the C library
-  headers unless gcc is installed, for the race detector in `make test` in
-  `backend/`), linking what it installs itself into `~/.local/bin`, which has to
-  be on `PATH`. It installs no Go linter and not Docker: `make test` and
-  `make lint` run in Docker
+  corepack, `yarn install --frozen-lockfile`, the pinned Go unless one at least
+  as new as `backend/go.mod` asks for is installed, the Go modules, and gcc with
+  the C library headers unless gcc is installed, for the race detector in
+  `make test` in `backend/`), linking what it installs itself into
+  `~/.local/bin`, which has to be on `PATH`. It installs no Go linter and not
+  Docker: `make test` and `make lint` run in Docker
 - `script/setup` — make a fresh clone ready for development: bootstrap plus the
   git pre-commit hook
 - `script/dev` — run the Vite dev server, which proxies `/api` to a locally

script/bootstrap

@@ -192,8 +192,7 @@ ensure_yarn() {
 go_ok() {
     if missing go; then return 1; fi
     [ -x "$(dirname "$(command -v go)")/gofmt" ] || return 1
-    version="$(GOTOOLCHAIN=local go version 2>/dev/null)" || return 1
-    case "$version" in
+    case "$(GOTOOLCHAIN=local go version 2>/dev/null)" in
         "go version go$GO_VERSION "*) return 0 ;;
         *) return 1 ;;
     esac