Format Go with gofmt, then golines -m 77 (closes #215)

script/fmt now runs golines -m 77 after gofmt, repeating golines until
it changes nothing, since one pass can leave a line the next splits.
script/fmt-check fails when either would change a file.
script/bootstrap installs golines v0.13.0 with go install, pinned to
its commit, and checks the installed version with go version -m.

The tree is reformatted. The longer lines this makes are fixed by
hand: nolint directives moved onto their own line above the statement,
one string split, and 20 functions over funlen's 80 lines shortened or
split, RunWAF and limitPercentages among them.

Model: opus-5-5

internal/reputation/dnsbl.go

@@ -203,7 +203,10 @@ func (d *DNSBL) Snapshot() []Verdict {
 	d.mu.Unlock()
 
 	slices.SortFunc(verdicts, func(a, b Verdict) int {
-		return cmp.Or(a.Client.Compare(b.Client), strings.Compare(a.Zone, b.Zone))
+		return cmp.Or(
+			a.Client.Compare(b.Client),
+			strings.Compare(a.Zone, b.Zone),
+		)
 	})
 
 	return verdicts
@@ -275,7 +278,11 @@ func (d *DNSBL) lookUp(ctx context.Context, q query) (bool, error) {
 	ctx, cancel := context.WithTimeout(ctx, d.params.Timeout)
 	defer cancel()
 
-	answer, err := d.resolver.LookupNetIP(ctx, "ip4", queryName(q.zone, q.client))
+	answer, err := d.resolver.LookupNetIP(
+		ctx,
+		"ip4",
+		queryName(q.zone, q.client),
+	)
 
 	var dnsErr *net.DNSError