Format Go with gofmt, then golines -m 77 (closes #215)

script/fmt now runs golines -m 77 after gofmt, repeating golines until
it changes nothing, since one pass can leave a line the next splits.
script/fmt-check fails when either would change a file.
script/bootstrap installs golines v0.13.0 with go install, pinned to
its commit, and checks the installed version with go version -m.

The tree is reformatted. The longer lines this makes are fixed by
hand: nolint directives moved onto their own line above the statement,
one string split, and 20 functions over funlen's 80 lines shortened or
split, RunWAF and limitPercentages among them.

Model: opus-5-5

internal/sww/waf_test.go

@@ -14,6 +14,7 @@ import (
 	"syscall"
 	"testing"
 	"time"
+
 	// The time zone database, so that the process TestMainRunsWAF starts
 	// finds the zone TZ names on any host.
 	_ "time/tzdata"
@@ -85,7 +86,8 @@ func TestMainRunsWAF(t *testing.T) {
 
 	dir := t.TempDir()
 	out := &output{}
-	cmd := exec.CommandContext(t.Context(), binary) //nolint:gosec // this test binary
+	//nolint:gosec // this test binary
+	cmd := exec.CommandContext(t.Context(), binary)
 	cmd.Stdout = out
 
 	cmd.Env = append(os.Environ(),
@@ -112,7 +114,11 @@ func TestMainRunsWAF(t *testing.T) {
 	select {
 	case status := <-exited:
 		if status != 0 {
-			t.Fatalf("exit status %d, want 0; output:\n%s", status, out.text())
+			t.Fatalf(
+				"exit status %d, want 0; output:\n%s",
+				status,
+				out.text(),
+			)
 		}
 	case <-time.After(waitLimit):
 		t.Fatal("still running after being told to stop")
@@ -123,7 +129,8 @@ func TestMainRunsWAF(t *testing.T) {
 
 	path := filepath.Join(dir, "clients.json")
 
-	clients, err := os.ReadFile(path) //nolint:gosec // a file in the test's directory
+	//nolint:gosec // a file in the test's directory
+	clients, err := os.ReadFile(path)
 	if err != nil {
 		t.Fatalf("read clients.json: %v", err)
 	}
@@ -181,7 +188,11 @@ func TestMainWithoutACommandItKnowsPrintsTheCommands(t *testing.T) {
 
 			for _, name := range []string{"rproxy", wafCommand, "healthcheck"} {
 				if !strings.Contains(stderr.String(), name) {
-					t.Errorf("stderr %q does not name %s", stderr.String(), name)
+					t.Errorf(
+						"stderr %q does not name %s",
+						stderr.String(),
+						name,
+					)
 				}
 			}
 
@@ -219,8 +230,13 @@ func ask(t *testing.T, addr, path string, status int, disposition string) {
 
 	if res.StatusCode != status ||
 		res.Header.Get(waf.DispositionHeader) != disposition {
-		t.Errorf("answered %d with disposition %q, want %d with %q", res.StatusCode,
-			res.Header.Get(waf.DispositionHeader), status, disposition)
+		t.Errorf(
+			"answered %d with disposition %q, want %d with %q",
+			res.StatusCode,
+			res.Header.Get(waf.DispositionHeader),
+			status,
+			disposition,
+		)
 	}
 }
 
@@ -245,7 +261,11 @@ func runWAF(t *testing.T, env map[string]string, use func(addr string)) {
 	select {
 	case status := <-exited:
 		if status != 0 {
-			t.Fatalf("exit status %d, want 0; output:\n%s", status, out.text())
+			t.Fatalf(
+				"exit status %d, want 0; output:\n%s",
+				status,
+				out.text(),
+			)
 		}
 	case <-time.After(waitLimit):
 		t.Fatal("still running after being told to stop")