Rename the settings whose names do not say what they control (closes #234)

Applies the setting renames of the naming audit under the SWW_WAF_ and
SWW_RPROXY_ prefixes, with sneak's names for the IP reputation cache
time and the two time limits, which now take milliseconds. The rproxy
log field default_disposition becomes waf_backend_no_answer, and
config.Config and config.FromEnvironment become config.WAF and
config.WAFFromEnvironment. Go fields, test names and prose follow. No
aliases; nothing reads the old names.

Model: opus-5-5

internal/waf/staticlists_test.go

@@ -156,11 +156,11 @@ func TestRateLimitExemptNetsAreNeitherCountedNorRefused(t *testing.T) {
 	app := startApp(t, func(http.ResponseWriter, *http.Request) {})
 	geojsURL, _ := startGeoJS(t)
 	addr, out := startProxyWithGeoJS(t, app.URL, geojsURL, map[string]string{
-		trustedProxies:      trustLocalhost,
-		lookupTimeout:       "1h",
-		rateLimitExemptNets: listedAddr + "," + fromKP,
-		tagDeny:             denyKP,
-		rateLimitPerMinute:  "1",
+		trustedProxies:             trustLocalhost,
+		asnAndCountryLookupTimeout: "3600000",
+		rateLimitExemptNets:        listedAddr + "," + fromKP,
+		tagDeny:                    denyKP,
+		rateLimitPerMinute:         "1",
 	})
 
 	// listedAddr's requests are neither refused nor counted, so the first