Format Go with gofmt, then golines -m 77 (closes #215)

script/fmt now runs golines -m 77 after gofmt, repeating golines until
it changes nothing, since one pass can leave a line the next splits.
script/fmt-check fails when either would change a file.
script/bootstrap installs golines v0.13.0 with go install, pinned to
its commit, and checks the installed version with go version -m.

The tree is reformatted. The longer lines this makes are fixed by
hand: nolint directives moved onto their own line above the statement,
one string split, and 20 functions over funlen's 80 lines shortened or
split, RunWAF and limitPercentages among them.

Model: opus-5-5

internal/requestlog/requestlog_test.go

@@ -18,7 +18,9 @@ func TestWriteWritesOneJSONLineMarkedRequest(t *testing.T) {
 	var out bytes.Buffer
 
 	err := requestlog.Write(&out, &requestlog.Line{
-		Time:            requestlog.FormatTime(time.Date(2026, 10, 3, 12, 0, 0, 0, time.UTC)),
+		Time: requestlog.FormatTime(
+			time.Date(2026, 10, 3, 12, 0, 0, 0, time.UTC),
+		),
 		ClientIP:        "203.0.113.9",
 		Status:          200,
 		Action:          requestlog.ActionForward,
@@ -80,7 +82,10 @@ func TestRequestLinesHoldTheQueryAndRefererAsSent(t *testing.T) {
 		t.Fatalf("write: %v", err)
 	}
 
-	err = requestlog.WriteRProxyLine(&out, &requestlog.RProxyLine{Query: "a=1&b=<2>"})
+	err = requestlog.WriteRProxyLine(
+		&out,
+		&requestlog.RProxyLine{Query: "a=1&b=<2>"},
+	)
 	if err != nil {
 		t.Fatalf("write the rproxy line: %v", err)
 	}
@@ -100,7 +105,10 @@ func TestRequestLinesHoldTheQueryAndRefererAsSent(t *testing.T) {
 		}
 	}
 
-	if !strings.Contains(lines[0], `"referer":"https://example.com/?x=1&y=<2>"`) {
+	if !strings.Contains(
+		lines[0],
+		`"referer":"https://example.com/?x=1&y=<2>"`,
+	) {
 		t.Errorf("%s does not hold the referer as sent", lines[0])
 	}
 }
@@ -132,8 +140,9 @@ func TestProcessLinesAreMarkedProcessAndGiveTheInstance(t *testing.T) {
 
 	var out bytes.Buffer
 
-	requestlog.NewProcessLogger(&out, "fsn1app1/blog", slog.LevelInfo).Info("starting",
-		"version", "v1")
+	requestlog.NewProcessLogger(&out, "fsn1app1/blog", slog.LevelInfo).
+		Info("starting",
+			"version", "v1")
 
 	var fields map[string]any
 
@@ -142,8 +151,10 @@ func TestProcessLinesAreMarkedProcessAndGiveTheInstance(t *testing.T) {
 		t.Fatalf("decode %q: %v", out.String(), err)
 	}
 
-	if fields["type"] != "process" || fields["instance"] != "fsn1app1/blog" ||
-		fields["msg"] != "starting" || fields["level"] != "INFO" ||
+	if fields["type"] != "process" ||
+		fields["instance"] != "fsn1app1/blog" ||
+		fields["msg"] != "starting" ||
+		fields["level"] != "INFO" ||
 		fields["version"] != "v1" {
 		t.Errorf("process line %v", fields)
 	}
@@ -154,7 +165,10 @@ func TestProcessLinesAreMarkedProcessAndGiveTheInstance(t *testing.T) {
 	if err != nil || !strings.HasSuffix(timeText, "Z") ||
 		len(timeText) != len("2006-01-02T15:04:05.000Z") ||
 		time.Since(logged) > time.Minute {
-		t.Errorf("process line time %q, want now in UTC with milliseconds", timeText)
+		t.Errorf(
+			"process line time %q, want now in UTC with milliseconds",
+			timeText,
+		)
 	}
 }
 
@@ -171,7 +185,11 @@ func TestProcessLoggerWritesTheMessagesAtItsLevelOrMoreSevere(t *testing.T) {
 
 			var out bytes.Buffer
 
-			processLog := requestlog.NewProcessLogger(&out, "fsn1app1/blog", level)
+			processLog := requestlog.NewProcessLogger(
+				&out,
+				"fsn1app1/blog",
+				level,
+			)
 			for _, at := range levels {
 				processLog.Log(t.Context(), at, "message")
 			}