Format Go with gofmt, then golines -m 77 (closes #215)

script/fmt now runs golines -m 77 after gofmt, repeating golines until
it changes nothing, since one pass can leave a line the next splits.
script/fmt-check fails when either would change a file.
script/bootstrap installs golines v0.13.0 with go install, pinned to
its commit, and checks the installed version with go version -m.

The tree is reformatted. The longer lines this makes are fixed by
hand: nolint directives moved onto their own line above the statement,
one string split, and 20 functions over funlen's 80 lines shortened or
split, RunWAF and limitPercentages among them.

Model: opus-5-5

internal/config/rproxy.go

@@ -65,7 +65,8 @@ var (
 	errNotMilliseconds = errors.New(
 		"is not a whole number of milliseconds above zero, such as 2000")
 	errNotMillisecondsOrOff = errors.New(
-		"is not a whole number of milliseconds above zero, such as 60000, or off")
+		"is not a whole number of milliseconds above zero, such as 60000, or off",
+	)
 )
 
 // RProxyFromEnvironment reads rproxy's settings with lookupEnv, normally
@@ -73,19 +74,36 @@ var (
 // SWRP_WAF_BACKEND, which has none, must be set. A setting that is set but
 // invalid is an error that names it. Since rproxy never touches disk, its
 // settings have no _FILE form.
-func RProxyFromEnvironment(lookupEnv func(string) (string, bool)) (*RProxy, error) {
+func RProxyFromEnvironment(
+	lookupEnv func(string) (string, bool),
+) (*RProxy, error) {
 	env := &environment{lookupEnv: withoutFileForms(lookupEnv)}
 	cfg := &RProxy{
-		ListenAddr:         env.address("SWRP_LISTEN_ADDR"),
-		UpstreamURL:        env.appURL("SWRP_UPSTREAM_URL", defaultUpstreamURL),
-		TrustedProxies:     env.netblocks("SWRP_TRUSTED_PROXIES", privateRanges),
-		WAFBackend:         env.wafBackend("SWRP_WAF_BACKEND"),
-		Timeout:            env.milliseconds("SWRP_TIMEOUT_MS", "2000"),
-		DefaultDisposition: env.disposition("SWRP_DEFAULT_DISPOSITION", "allow"),
-		MaxRequestSize:     env.size("SWRP_MAX_REQUEST_SIZE", "100M"),
-		MaxResponseSize:    env.size("SWRP_MAX_RESPONSE_SIZE", "1G"),
-		MaxRequestTime:     env.millisecondsOrOff("SWRP_MAX_REQUEST_TIME_MS", "60000"),
-		MaxResponseTime:    env.millisecondsOrOff("SWRP_MAX_RESPONSE_TIME_MS", "1800000"),
+		ListenAddr: env.address("SWRP_LISTEN_ADDR"),
+		UpstreamURL: env.appURL(
+			"SWRP_UPSTREAM_URL",
+			defaultUpstreamURL,
+		),
+		TrustedProxies: env.netblocks(
+			"SWRP_TRUSTED_PROXIES",
+			privateRanges,
+		),
+		WAFBackend: env.wafBackend("SWRP_WAF_BACKEND"),
+		Timeout:    env.milliseconds("SWRP_TIMEOUT_MS", "2000"),
+		DefaultDisposition: env.disposition(
+			"SWRP_DEFAULT_DISPOSITION",
+			"allow",
+		),
+		MaxRequestSize:  env.size("SWRP_MAX_REQUEST_SIZE", "100M"),
+		MaxResponseSize: env.size("SWRP_MAX_RESPONSE_SIZE", "1G"),
+		MaxRequestTime: env.millisecondsOrOff(
+			"SWRP_MAX_REQUEST_TIME_MS",
+			"60000",
+		),
+		MaxResponseTime: env.millisecondsOrOff(
+			"SWRP_MAX_RESPONSE_TIME_MS",
+			"1800000",
+		),
 	}
 
 	if env.err != nil {
@@ -184,7 +202,9 @@ func (e *environment) milliseconds(name, defaultValue string) time.Duration {
 
 // millisecondsOrOff reads a setting that is a whole number of milliseconds
 // above zero, or off, which is 0.
-func (e *environment) millisecondsOrOff(name, defaultValue string) time.Duration {
+func (e *environment) millisecondsOrOff(
+	name, defaultValue string,
+) time.Duration {
 	value := e.value(name, defaultValue)
 	if value == off {
 		return 0
@@ -219,7 +239,8 @@ func parseUpstreamURL(value string) (*url.URL, error) {
 	}
 
 	onlySchemeAndHost := (upstream.Scheme == "http" || upstream.Scheme == "https") &&
-		upstream.Hostname() != "" && upstream.User == nil &&
+		upstream.Hostname() != "" &&
+		upstream.User == nil &&
 		upstream.Opaque == "" &&
 		(upstream.Path == "" || upstream.Path == "/") &&
 		upstream.RawQuery == "" &&