Rename the settings whose names do not say what they control (closes #234)

Applies the setting renames of the naming audit under the SWW_WAF_ and
SWW_RPROXY_ prefixes, with sneak's names for the IP reputation cache
time and the two time limits, which now take milliseconds. The rproxy
log field default_disposition becomes waf_backend_no_answer, and
config.Config and config.FromEnvironment become config.WAF and
config.WAFFromEnvironment. Go fields, test names and prose follow. No
aliases; nothing reads the old names.

Model: opus-5-5

internal/waf/abuseipdb.go

@@ -1,7 +1,7 @@
 package waf
 
 // The heuristic abuseipdb. It reads SWW_WAF_ABUSEIPDB_KEY,
-// SWW_WAF_ABUSEIPDB_MIN_SCORE and SWW_WAF_REPUTATION_ACTION.
+// SWW_WAF_ABUSEIPDB_MIN_SCORE and SWW_WAF_DNSBL_ABUSEIPDB_ACTION.
 
 import (
 	"context"
@@ -16,7 +16,7 @@ import (
 
 // abuseIPDB adds the tag abuseipdb and notes AbuseIPDB, as noteHit does, with
 // the score, when its score of the client is a hit, and refuses the request
-// when SWW_WAF_REPUTATION_ACTION is deny, as dnsbl does for a zone. While
+// when SWW_WAF_DNSBL_ABUSEIPDB_ACTION is deny, as dnsbl does for a zone. While
 // SWW_WAF_ABUSEIPDB_KEY is unset it does nothing. A client without a score is
 // checked in the background, by the request's address, if its history counts
 // an offence, and the request does not wait for the answer. The score is then
@@ -54,7 +54,7 @@ func (abuseIPDB) check(
 		"scored by AbuseIPDB at or over SWW_WAF_ABUSEIPDB_MIN_SCORE",
 	)
 
-	if rq.h.config.ReputationAction != deny {
+	if rq.h.config.DNSBLAbuseIPDBAction != deny {
 		return nil
 	}