Format Go with gofmt, then golines -m 77 (closes #215)

script/fmt now runs golines -m 77 after gofmt, repeating golines until
it changes nothing, since one pass can leave a line the next splits.
script/fmt-check fails when either would change a file.
script/bootstrap installs golines v0.13.0 with go install, pinned to
its commit, and checks the installed version with go version -m.

The tree is reformatted. The longer lines this makes are fixed by
hand: nolint directives moved onto their own line above the statement,
one string split, and 20 functions over funlen's 80 lines shortened or
split, RunWAF and limitPercentages among them.

Model: opus-5-5

internal/waf/health_test.go

@@ -13,7 +13,11 @@ func TestHealthEndpointCountsTowardNoLimit(t *testing.T) {
 
 	// With a limit of one request a minute, any request counted before
 	// the last one would have it refused.
-	s, _, _ := startWithClock(t, "", map[string]string{rateLimitPerMinute: "1"})
+	s, _, _ := startWithClock(
+		t,
+		"",
+		map[string]string{rateLimitPerMinute: "1"},
+	)
 
 	const (
 		healthChecks = 3
@@ -24,9 +28,15 @@ func TestHealthEndpointCountsTowardNoLimit(t *testing.T) {
 		got := s.ownEndpointRequest("", http.MethodGet, waf.HealthPath, "",
 			http.StatusOK)
 
-		if string(got.body) != "ok\n" || got.header.Get("Content-Type") != contentType {
-			t.Errorf("health endpoint answered %q with Content-Type %q, want ok "+
-				"with %q", got.body, got.header.Get("Content-Type"), contentType)
+		if string(got.body) != "ok\n" ||
+			got.header.Get("Content-Type") != contentType {
+			t.Errorf(
+				"health endpoint answered %q with Content-Type %q, want ok "+
+					"with %q",
+				got.body,
+				got.header.Get("Content-Type"),
+				contentType,
+			)
 		}
 	}
 
@@ -34,8 +44,12 @@ func TestHealthEndpointCountsTowardNoLimit(t *testing.T) {
 
 	for _, line := range s.out.endedLines(t, healthChecks)[:healthChecks] {
 		if line.ResponseContentType != contentType {
-			t.Errorf("health check's log line has response_content_type %q, "+
-				"want %q", line.ResponseContentType, contentType)
+			t.Errorf(
+				"health check's log line has response_content_type %q, "+
+					"want %q",
+				line.ResponseContentType,
+				contentType,
+			)
 		}
 	}
 }