Format Go with gofmt, then golines -m 77 (closes #215)

script/fmt now runs golines -m 77 after gofmt, repeating golines until
it changes nothing, since one pass can leave a line the next splits.
script/fmt-check fails when either would change a file.
script/bootstrap installs golines v0.13.0 with go install, pinned to
its commit, and checks the installed version with go version -m.

The tree is reformatted. The longer lines this makes are fixed by
hand: nolint directives moved onto their own line above the statement,
one string split, and 20 functions over funlen's 80 lines shortened or
split, RunWAF and limitPercentages among them.

Model: opus-5-5

internal/reputation/reputation.go

@@ -45,13 +45,16 @@ const (
 )
 
 var (
-	errStatus        = errors.New("the server answered")
-	errTooLong       = errors.New("the list is longer than 16 MiB")
-	errNotNetblock   = errors.New("is not an address or a netblock, such as 192.0.2.0/24")
+	errStatus      = errors.New("the server answered")
+	errTooLong     = errors.New("the list is longer than 16 MiB")
+	errNotNetblock = errors.New(
+		"is not an address or a netblock, such as 192.0.2.0/24",
+	)
 	errNotASNPercent = errors.New(
 		"is not an AS number, : and a percentage, such as AS64496:50")
 	errNotDecision = errors.New(
-		"does not give an address or a netblock and a duration, such as 4h0m0s")
+		"does not give an address or a netblock and a duration, such as 4h0m0s",
+	)
 )
 
 // List is a list as lists.json holds it: the URL it is fetched from,
@@ -226,7 +229,10 @@ func (l *Lists) ASNLimitPercent(asn string) (int64, bool) {
 // decision list on a netblock that holds addr and that ends last, and
 // whether it is still in force at now. A decision that has ended no
 // longer bans, even before the next fetch drops it.
-func (l *Lists) CrowdSecDecision(addr netip.Addr, now time.Time) (Decision, bool) {
+func (l *Lists) CrowdSecDecision(
+	addr netip.Addr,
+	now time.Time,
+) (Decision, bool) {
 	if l.params.CrowdSecDecisionsURL == "" {
 		return Decision{}, false
 	}
@@ -431,12 +437,24 @@ func (l *Lists) fetch(ctx context.Context, listURL string) {
 		// Raised before it is logged, so that the alert is there once the
 		// log line is.
 		raiseFailure(l.params.Alerts, failed, listURL, err)
-		l.params.ProcessLog.Warn(failed, "url", listURL, "error", err.Error())
+		l.params.ProcessLog.Warn(
+			failed,
+			"url",
+			listURL,
+			"error",
+			err.Error(),
+		)
 
 		return
 	}
 
-	l.params.ProcessLog.Info("fetched a list", "url", listURL, "lines", len(lines))
+	l.params.ProcessLog.Info(
+		"fetched a list",
+		"url",
+		listURL,
+		"lines",
+		len(lines),
+	)
 }
 
 // raiseFailure raises a source_failure alert into queue, with reason, and
@@ -459,7 +477,12 @@ func (l *Lists) get(ctx context.Context, listURL string) ([]string, error) {
 	ctx, cancel := context.WithTimeout(ctx, fetchTimeout)
 	defer cancel()
 
-	req, err := http.NewRequestWithContext(ctx, http.MethodGet, listURL, http.NoBody)
+	req, err := http.NewRequestWithContext(
+		ctx,
+		http.MethodGet,
+		listURL,
+		http.NoBody,
+	)
 	if err != nil {
 		return nil, fmt.Errorf("make the request: %w", err)
 	}
@@ -570,7 +593,10 @@ func parseNetblock(text string) (netip.Prefix, bool) {
 		return netip.Prefix{}, false
 	}
 
-	return netip.PrefixFrom(netblock.Addr().Unmap(), netblock.Bits()-mappedBits), true
+	return netip.PrefixFrom(
+		netblock.Addr().Unmap(),
+		netblock.Bits()-mappedBits,
+	), true
 }
 
 // parsePercents reads the lines of the file of AS:percent lines, each an
@@ -628,7 +654,8 @@ func parseDecisions(lines []string, fetched time.Time) (entries, error) {
 	found := entries{decisions: map[netip.Prefix]Decision{}}
 
 	for i, decision := range answer {
-		if decision.Type != "ban" || (decision.Scope != "Ip" && decision.Scope != "Range") {
+		if decision.Type != "ban" ||
+			(decision.Scope != "Ip" && decision.Scope != "Range") {
 			continue
 		}
 
@@ -636,12 +663,19 @@ func parseDecisions(lines []string, fetched time.Time) (entries, error) {
 
 		duration, err := time.ParseDuration(decision.Duration)
 		if !ok || err != nil {
-			return entries{}, fmt.Errorf("decision %d %w", i+1, errNotDecision)
+			return entries{}, fmt.Errorf(
+				"decision %d %w",
+				i+1,
+				errNotDecision,
+			)
 		}
 
 		expires := fetched.Add(duration)
 		if expires.After(found.decisions[netblock].Expires) {
-			found.decisions[netblock] = Decision{Expires: expires, Scenario: decision.Scenario}
+			found.decisions[netblock] = Decision{
+				Expires:  expires,
+				Scenario: decision.Scenario,
+			}
 		}
 
 		if !slices.Contains(found.lengths, netblock.Bits()) {