Format Go with gofmt, then golines -m 77 (closes #215)

script/fmt now runs golines -m 77 after gofmt, repeating golines until
it changes nothing, since one pass can leave a line the next splits.
script/fmt-check fails when either would change a file.
script/bootstrap installs golines v0.13.0 with go install, pinned to
its commit, and checks the installed version with go version -m.

The tree is reformatted. The longer lines this makes are fixed by
hand: nolint directives moved onto their own line above the statement,
one string split, and 20 functions over funlen's 80 lines shortened or
split, RunWAF and limitPercentages among them.

Model: opus-5-5

internal/remotelog/remotelog.go

@@ -185,7 +185,11 @@ func (s *Sender) Run(ctx context.Context, processLog *slog.Logger) {
 // and over TCP and TLS after its length in bytes and a space, the
 // octet-counted framing of RFC 6587 and RFC 5425.
 func (s *Sender) record(at string, line []byte) []byte {
-	record := make([]byte, 0, len(s.beforeTime)+len(at)+len(s.afterTime)+len(line))
+	record := make(
+		[]byte,
+		0,
+		len(s.beforeTime)+len(at)+len(s.afterTime)+len(line),
+	)
 	record = append(record, s.beforeTime...)
 	record = append(record, at...)
 	record = append(record, s.afterTime...)
@@ -219,7 +223,10 @@ func (s *Sender) put(record []byte) {
 // send connects to the endpoint and sends each record as it comes into
 // the buffer, until ctx is done, and returns the connection then open, or
 // nil.
-func (s *Sender) send(ctx context.Context, processLog *slog.Logger) net.Conn {
+func (s *Sender) send(
+	ctx context.Context,
+	processLog *slog.Logger,
+) net.Conn {
 	delay := firstRetryDelay
 
 	for {