Rename the settings whose names do not say what they control (closes #234)

Applies the setting renames of the naming audit under the SWW_WAF_ and
SWW_RPROXY_ prefixes, with sneak's names for the IP reputation cache
time and the two time limits, which now take milliseconds. The rproxy
log field default_disposition becomes waf_backend_no_answer, and
config.Config and config.FromEnvironment become config.WAF and
config.WAFFromEnvironment. Go fields, test names and prose follow. No
aliases; nothing reads the old names.

Model: opus-5-5

internal/reputation/abuseipdb.go

@@ -65,8 +65,8 @@ type AbuseIPDBParams struct {
 	MinScore    int64
 	DailyBudget int
 	// CacheTTL is how long a score is used after it was fetched
-	// (SWW_WAF_REPUTATION_CACHE_TTL), and Timeout how long a check may take
-	// (SWW_WAF_REPUTATION_TIMEOUT).
+	// (SWW_WAF_IP_REPUTATION_CACHE_TTL), and Timeout how long a check may
+	// take (SWW_WAF_DNSBL_ABUSEIPDB_TIMEOUT_MS).
 	CacheTTL time.Duration
 	Timeout  time.Duration
 	// Now tells the time, normally time.Now in UTC.

internal/reputation/dnsbl.go

@@ -60,8 +60,8 @@ type DNSBLParams struct {
 	// host's, as /etc/resolv.conf names it.
 	Resolver netip.AddrPort
 	// CacheTTL is how long a verdict is used after it was fetched
-	// (SWW_WAF_REPUTATION_CACHE_TTL), and Timeout how long a query may take
-	// (SWW_WAF_REPUTATION_TIMEOUT).
+	// (SWW_WAF_IP_REPUTATION_CACHE_TTL), and Timeout how long a query may
+	// take (SWW_WAF_DNSBL_ABUSEIPDB_TIMEOUT_MS).
 	CacheTTL time.Duration
 	Timeout  time.Duration
 	// Now tells the time, normally time.Now in UTC.

internal/reputation/dnsbl_test.go

@@ -40,10 +40,11 @@ const (
 	// zone and otherZone are the DNSBL zones the tests name.
 	zone      = "dnsbl.example"
 	otherZone = "other.example"
-	// cacheTTL is the tests' SWW_WAF_REPUTATION_CACHE_TTL, and timeout their
-	// SWW_WAF_REPUTATION_TIMEOUT: a second, the least time /etc/resolv.conf
-	// can have Go's resolver wait for one server, so that it is the
-	// DNSBL's own timeout that ends a query, whatever that file says.
+	// cacheTTL is the tests' SWW_WAF_IP_REPUTATION_CACHE_TTL, and timeout
+	// their SWW_WAF_DNSBL_ABUSEIPDB_TIMEOUT_MS: a second, the least time
+	// /etc/resolv.conf can have Go's resolver wait for one server, so that
+	// it is the DNSBL's own timeout that ends a query, whatever that file
+	// says.
 	cacheTTL = 24 * time.Hour
 	timeout  = time.Second
 	// listed and unlisted are clients zone is asked about by the names