Format Go with gofmt, then golines -m 77 (closes #215)

script/fmt now runs golines -m 77 after gofmt, repeating golines until
it changes nothing, since one pass can leave a line the next splits.
script/fmt-check fails when either would change a file.
script/bootstrap installs golines v0.13.0 with go install, pinned to
its commit, and checks the installed version with go version -m.

The tree is reformatted. The longer lines this makes are fixed by
hand: nolint directives moved onto their own line above the statement,
one string split, and 20 functions over funlen's 80 lines shortened or
split, RunWAF and limitPercentages among them.

Model: opus-5-5

internal/sww/healthcheck.go

@@ -31,7 +31,9 @@ var errHealthEndpoint = errors.New("the health endpoint answered")
 // args are the arguments after `healthcheck`; it takes none, and given
 // one it names it on stderr and returns 1 without checking anything.
 func HealthCheck(
-	ctx context.Context, args []string, lookupEnv func(string) (string, bool),
+	ctx context.Context,
+	args []string,
+	lookupEnv func(string) (string, bool),
 	stderr io.Writer,
 ) int {
 	if len(args) > 0 {
@@ -85,7 +87,9 @@ func checkWAF(
 func checkRProxyAndApp(
 	ctx context.Context, lookupEnv func(string) (string, bool),
 ) error {
-	listenAddr, upstreamURL, err := config.RProxyListenAddrAndUpstreamURL(lookupEnv)
+	listenAddr, upstreamURL, err := config.RProxyListenAddrAndUpstreamURL(
+		lookupEnv,
+	)
 	if err != nil {
 		return fmt.Errorf("invalid setting: %w", err)
 	}
@@ -95,7 +99,11 @@ func checkRProxyAndApp(
 		return fmt.Errorf("ask rproxy: %w", err)
 	}
 
-	conn, err := (&net.Dialer{}).DialContext(ctx, "tcp", appAddress(upstreamURL))
+	conn, err := (&net.Dialer{}).DialContext(
+		ctx,
+		"tcp",
+		appAddress(upstreamURL),
+	)
 	if err != nil {
 		return fmt.Errorf("connect to the app: %w", err)
 	}
@@ -109,9 +117,17 @@ func checkRProxyAndApp(
 // listenAddr, which the settings have checked has one.
 func askHealthEndpoint(ctx context.Context, listenAddr string) error {
 	_, port, _ := net.SplitHostPort(listenAddr)
-	health := "http://" + net.JoinHostPort("127.0.0.1", port) + waf.HealthPath
+	health := "http://" + net.JoinHostPort(
+		"127.0.0.1",
+		port,
+	) + waf.HealthPath
 
-	req, err := http.NewRequestWithContext(ctx, http.MethodGet, health, http.NoBody)
+	req, err := http.NewRequestWithContext(
+		ctx,
+		http.MethodGet,
+		health,
+		http.NoBody,
+	)
 	if err != nil {
 		return fmt.Errorf("make the request: %w", err)
 	}