Format Go with gofmt, then golines -m 77 (closes #215)

script/fmt now runs golines -m 77 after gofmt, repeating golines until
it changes nothing, since one pass can leave a line the next splits.
script/fmt-check fails when either would change a file.
script/bootstrap installs golines v0.13.0 with go install, pinned to
its commit, and checks the installed version with go version -m.

The tree is reformatted. The longer lines this makes are fixed by
hand: nolint directives moved onto their own line above the statement,
one string split, and 20 functions over funlen's 80 lines shortened or
split, RunWAF and limitPercentages among them.

Model: opus-5-5

internal/waf/heuristics.go

@@ -117,7 +117,10 @@ func (rq *request) runHeuristics(
 // after_answer_heuristic_figures name the heuristic that gave a verdict, and
 // give its figures, so that heuristic and heuristic_figures still name the one
 // that refused the request. ctx is the request's own context.
-func (rq *request) runBanningHeuristics(ctx context.Context, list []heuristic) {
+func (rq *request) runBanningHeuristics(
+	ctx context.Context,
+	list []heuristic,
+) {
 	name, v := rq.firstVerdict(ctx, list, rq.h.now())
 	if v != nil {
 		rq.line.AfterAnswerHeuristic = name