Format Go with gofmt, then golines -m 77 (closes #215)

script/fmt now runs golines -m 77 after gofmt, repeating golines until
it changes nothing, since one pass can leave a line the next splits.
script/fmt-check fails when either would change a file.
script/bootstrap installs golines v0.13.0 with go install, pinned to
its commit, and checks the installed version with go version -m.

The tree is reformatted. The longer lines this makes are fixed by
hand: nolint directives moved onto their own line above the statement,
one string split, and 20 functions over funlen's 80 lines shortened or
split, RunWAF and limitPercentages among them.

Model: opus-5-5

internal/waf/history_test.go

@@ -60,7 +60,11 @@ func TestHistoryKeepsEachRequestOfTheClient(t *testing.T) {
 func TestTableOfClientsHoldsAtMostMaxTrackedClients(t *testing.T) {
 	t.Parallel()
 
-	s, _, server := startWithClock(t, "", map[string]string{maxTrackedClients: "2"})
+	s, _, server := startWithClock(
+		t,
+		"",
+		map[string]string{maxTrackedClients: "2"},
+	)
 
 	// The third client drops the least recently seen, the first, with its
 	// history.
@@ -70,8 +74,12 @@ func TestTableOfClientsHoldsAtMostMaxTrackedClients(t *testing.T) {
 
 	_, held := server.Limiter.Client(netip.MustParsePrefix("192.0.2.1/32"))
 	if server.Limiter.Len() != 2 || held {
-		t.Errorf("the table holds %d clients, the first among them: %t; want 2, "+
-			"without it", server.Limiter.Len(), held)
+		t.Errorf(
+			"the table holds %d clients, the first among them: %t; want 2, "+
+				"without it",
+			server.Limiter.Len(),
+			held,
+		)
 	}
 }
 
@@ -84,7 +92,10 @@ func TestHistoryCountsTheBodiesEachWay(t *testing.T) {
 	})
 	addr, out, server := startProxyWithClock(t, app.URL, "", time.Now, nil)
 
-	got := do(t, newRequest(t, http.MethodPost, addr, "/", strings.NewReader("abc")))
+	got := do(
+		t,
+		newRequest(t, http.MethodPost, addr, "/", strings.NewReader("abc")),
+	)
 	wantStatus(t, got, http.StatusOK)
 	out.endedLine(t)
 
@@ -98,9 +109,19 @@ func TestHistoryCountsTheBodiesEachWay(t *testing.T) {
 func TestOwnEndpointsAreNotInTheHistory(t *testing.T) {
 	t.Parallel()
 
-	s, _, server := startWithClock(t, "", map[string]string{metricsToken: token})
+	s, _, server := startWithClock(
+		t,
+		"",
+		map[string]string{metricsToken: token},
+	)
 
-	s.ownEndpointRequest("", http.MethodGet, waf.HealthPath, "", http.StatusOK)
+	s.ownEndpointRequest(
+		"",
+		http.MethodGet,
+		waf.HealthPath,
+		"",
+		http.StatusOK,
+	)
 	s.ownEndpointRequest("", http.MethodGet, waf.MetricsPath, "",
 		http.StatusUnauthorized)
 	s.scrape()
@@ -120,7 +141,8 @@ func TestPathUnderTheOwnPrefixIsNeitherForwardedNorRefused(t *testing.T) {
 	out.endedLine(t)
 
 	history := historyOf(t, server, localhost)
-	if history.Requests != 1 || history.Forwarded != 0 || history.Refused != 0 {
+	if history.Requests != 1 || history.Forwarded != 0 ||
+		history.Refused != 0 {
 		t.Errorf("history counts %d requests, %d forwarded and %d refused, "+
 			"want 1, 0 and 0", history.Requests, history.Forwarded, history.Refused)
 	}