Format Go with gofmt, then golines -m 77 (closes #215)

script/fmt now runs golines -m 77 after gofmt, repeating golines until
it changes nothing, since one pass can leave a line the next splits.
script/fmt-check fails when either would change a file.
script/bootstrap installs golines v0.13.0 with go install, pinned to
its commit, and checks the installed version with go version -m.

The tree is reformatted. The longer lines this makes are fixed by
hand: nolint directives moved onto their own line above the statement,
one string split, and 20 functions over funlen's 80 lines shortened or
split, RunWAF and limitPercentages among them.

Model: opus-5-5

internal/routewatch/routewatch.go

@@ -206,7 +206,11 @@ func (c *Client) Load(answers []Answer) {
 // query as no longer under way. A query that fails gives no answer, and
 // routewatch is not asked again for failureKept. Only the first failure of
 // those under way is logged.
-func (c *Client) ask(ctx context.Context, client netip.Prefix, addr netip.Addr) {
+func (c *Client) ask(
+	ctx context.Context,
+	client netip.Prefix,
+	addr netip.Addr,
+) {
 	route, err := c.query(ctx, addr)
 	now := c.params.Now()
 
@@ -227,7 +231,11 @@ func (c *Client) ask(ctx context.Context, client netip.Prefix, addr netip.Addr)
 	c.mu.Unlock()
 
 	if firstFailure {
-		c.params.ProcessLog.Warn("asking routewatch failed", "error", err.Error())
+		c.params.ProcessLog.Warn(
+			"asking routewatch failed",
+			"error",
+			err.Error(),
+		)
 	}
 }
 
@@ -243,7 +251,12 @@ func (c *Client) query(ctx context.Context, addr netip.Addr) (Route, error) {
 		return Route{}, fmt.Errorf("make the URL: %w", err)
 	}
 
-	req, err := http.NewRequestWithContext(ctx, http.MethodGet, endpoint, http.NoBody)
+	req, err := http.NewRequestWithContext(
+		ctx,
+		http.MethodGet,
+		endpoint,
+		http.NoBody,
+	)
 	if err != nil {
 		return Route{}, fmt.Errorf("make the request: %w", err)
 	}