Format Go with gofmt, then golines -m 77 (closes #215)

script/fmt now runs golines -m 77 after gofmt, repeating golines until
it changes nothing, since one pass can leave a line the next splits.
script/fmt-check fails when either would change a file.
script/bootstrap installs golines v0.13.0 with go install, pinned to
its commit, and checks the installed version with go version -m.

The tree is reformatted. The longer lines this makes are fixed by
hand: nolint directives moved onto their own line above the statement,
one string split, and 20 functions over funlen's 80 lines shortened or
split, RunWAF and limitPercentages among them.

Model: opus-5-5

internal/ratelimit/snapshot_test.go

@@ -12,7 +12,12 @@ import (
 func TestSnapshotListsTheClientsByAddress(t *testing.T) {
 	t.Parallel()
 
-	want := []string{"192.0.2.1/32", "203.0.113.9/32", "203.0.113.10/32", "2001:db8::/64"}
+	want := []string{
+		"192.0.2.1/32",
+		"203.0.113.9/32",
+		"203.0.113.10/32",
+		"2001:db8::/64",
+	}
 
 	limiter := ratelimit.New(ratelimit.Limits{}, tableSize)
 	for _, i := range []int{2, 3, 0, 1} {
@@ -32,8 +37,12 @@ func TestSnapshotListsTheClientsByAddress(t *testing.T) {
 
 	counted := ratelimit.Buckets{Start: midnight(), Current: 1}
 	if snapshot[0].Minute != counted || snapshot[0].Day != counted {
-		t.Errorf("buckets %+v and %+v, want %+v", snapshot[0].Minute, snapshot[0].Day,
-			counted)
+		t.Errorf(
+			"buckets %+v and %+v, want %+v",
+			snapshot[0].Minute,
+			snapshot[0].Day,
+			counted,
+		)
 	}
 }
 
@@ -86,10 +95,15 @@ func TestLoadEmptiesBucketsWhoseTimeHasPassed(t *testing.T) {
 		t.Errorf("loaded two minutes on as %+v", got)
 	}
 
-	if got.MinuteBytes != (ratelimit.Buckets{}) || got.HourBytes.Current != 5 ||
+	if got.MinuteBytes != (ratelimit.Buckets{}) ||
+		got.HourBytes.Current != 5 ||
 		got.DayBytes.Current != 5 {
-		t.Errorf("loaded two minutes on with buckets of bytes %+v, %+v and %+v",
-			got.MinuteBytes, got.HourBytes, got.DayBytes)
+		t.Errorf(
+			"loaded two minutes on with buckets of bytes %+v, %+v and %+v",
+			got.MinuteBytes,
+			got.HourBytes,
+			got.DayBytes,
+		)
 	}
 
 	if got.MinuteRefusals != (ratelimit.Buckets{}) {
@@ -101,8 +115,13 @@ func TestLoadEmptiesBucketsWhoseTimeHasPassed(t *testing.T) {
 	got = loaded(start.Add(2*time.Minute - time.Nanosecond))
 	if got.Minute.Current != 1 || got.MinuteBytes.Current != 5 ||
 		got.MinuteRefusals.Current != 1 {
-		t.Errorf("loaded just under two minutes on with minute buckets %+v, %+v "+
-			"and %+v", got.Minute, got.MinuteBytes, got.MinuteRefusals)
+		t.Errorf(
+			"loaded just under two minutes on with minute buckets %+v, %+v "+
+				"and %+v",
+			got.Minute,
+			got.MinuteBytes,
+			got.MinuteRefusals,
+		)
 	}
 }