Format Go with gofmt, then golines -m 77 (closes #215)

script/fmt now runs golines -m 77 after gofmt, repeating golines until
it changes nothing, since one pass can leave a line the next splits.
script/fmt-check fails when either would change a file.
script/bootstrap installs golines v0.13.0 with go install, pinned to
its commit, and checks the installed version with go version -m.

The tree is reformatted. The longer lines this makes are fixed by
hand: nolint directives moved onto their own line above the statement,
one string split, and 20 functions over funlen's 80 lines shortened or
split, RunWAF and limitPercentages among them.

Model: opus-5-5

internal/waf/biased.go

@@ -22,8 +22,10 @@ type percentage struct {
 // below 100, or SWW_ASN_LIMIT_PERCENT_URL is set. The client's lookup is
 // then needed before its request goes on.
 func biasedThresholdsSet(cfg *config.Config) bool {
-	return len(cfg.ASNBytesPercent) > 0 || len(cfg.CountryBytesPercent) > 0 ||
-		cfg.UnknownLimitPercent < whole || cfg.ASNLimitPercentURL != ""
+	return len(cfg.ASNBytesPercent) > 0 ||
+		len(cfg.CountryBytesPercent) > 0 ||
+		cfg.UnknownLimitPercent < whole ||
+		cfg.ASNLimitPercentURL != ""
 }
 
 // limitPercentages returns the client's limit percentages, for the rate
@@ -48,7 +50,10 @@ func (rq *request) limitPercentages() (percentage, percentage) {
 
 	unknown := percentage{percent: whole}
 	if country == "" && !rq.skippedLookupWait {
-		unknown = percentage{cfg.UnknownLimitPercent, "SWW_UNKNOWN_LIMIT_PERCENT"}
+		unknown = percentage{
+			cfg.UnknownLimitPercent,
+			"SWW_UNKNOWN_LIMIT_PERCENT",
+		}
 	}
 
 	fetched := percentage{percent: whole}
@@ -58,24 +63,41 @@ func (rq *request) limitPercentages() (percentage, percentage) {
 
 	blocklisted := percentage{percent: whole}
 	if rq.blocklisted && cfg.BlocklistAction == "limit" {
-		blocklisted = percentage{cfg.BlocklistLimitPercent, "SWW_BLOCKLIST_ACTION"}
+		blocklisted = percentage{
+			cfg.BlocklistLimitPercent,
+			"SWW_BLOCKLIST_ACTION",
+		}
 	}
 
 	reputationListed := percentage{percent: whole}
-	if (rq.dnsblListed || rq.abuseIPDBHit) && cfg.ReputationAction == "limit" {
-		reputationListed = percentage{cfg.ReputationLimitPercent, "SWW_REPUTATION_ACTION"}
+	if (rq.dnsblListed || rq.abuseIPDBHit) &&
+		cfg.ReputationAction == "limit" {
+		reputationListed = percentage{
+			cfg.ReputationLimitPercent,
+			"SWW_REPUTATION_ACTION",
+		}
 	}
 
 	const tagSetting = "SWW_TAG_LIMIT_PERCENT"
 
-	asnRequests := lowest(given(cfg.TagLimitPercent, asnTag(asn), tagSetting), fetched)
-	countryRequests := given(cfg.TagLimitPercent, countryTag(country), tagSetting)
+	asnRequests := lowest(
+		given(cfg.TagLimitPercent, asnTag(asn), tagSetting),
+		fetched,
+	)
+	countryRequests := given(
+		cfg.TagLimitPercent,
+		countryTag(country),
+		tagSetting,
+	)
 
 	otherTags := percentage{percent: whole}
 
 	for _, tag := range rq.line.Tags {
 		if tag != asnTag(asn) && tag != countryTag(country) {
-			otherTags = lowest(otherTags, given(cfg.TagLimitPercent, tag, tagSetting))
+			otherTags = lowest(
+				otherTags,
+				given(cfg.TagLimitPercent, tag, tagSetting),
+			)
 		}
 	}
 
@@ -85,12 +107,18 @@ func (rq *request) limitPercentages() (percentage, percentage) {
 	}
 
 	if _, listed := cfg.CountryBytesPercent[country]; listed {
-		countryBytes = given(cfg.CountryBytesPercent, country, "SWW_COUNTRY_BYTES_PERCENT")
+		countryBytes = given(
+			cfg.CountryBytesPercent,
+			country,
+			"SWW_COUNTRY_BYTES_PERCENT",
+		)
 	}
 
-	return lowest(asnRequests, countryRequests, otherTags, unknown, blocklisted,
-			reputationListed),
-		lowest(asnBytes, countryBytes, otherTags, unknown, blocklisted, reputationListed)
+	// The limits that lower requests and bytes alike.
+	common := lowest(otherTags, unknown, blocklisted, reputationListed)
+
+	return lowest(asnRequests, countryRequests, common),
+		lowest(asnBytes, countryBytes, common)
 }
 
 // given returns the percentage percents, the setting named setting, gives