Format Go with gofmt, then golines -m 77 (closes #215)

script/fmt now runs golines -m 77 after gofmt, repeating golines until
it changes nothing, since one pass can leave a line the next splits.
script/fmt-check fails when either would change a file.
script/bootstrap installs golines v0.13.0 with go install, pinned to
its commit, and checks the installed version with go version -m.

The tree is reformatted. The longer lines this makes are fixed by
hand: nolint directives moved onto their own line above the statement,
one string split, and 20 functions over funlen's 80 lines shortened or
split, RunWAF and limitPercentages among them.

Model: opus-5-5

README.md

@@ -711,7 +711,8 @@ on the host.
 - `script/bootstrap`: installs on the host what the other scripts need, with
   `make bootstrap`:
     - `make`, `git` and `curl`;
-    - Go, for `gofmt`;
+    - Go, for `gofmt` and to build `golines`;
+    - `golines`, at a pinned version, with `go install`;
     - node, yarn and prettier.
 - `script/setup`: readies a fresh clone: `script/bootstrap`, then
   `script/install-precommit`. `make setup`.
@@ -728,8 +729,11 @@ on the host.
   the `tidy` stage of the `Dockerfile`. `make tidy`.
 - `script/lint`: runs golangci-lint, as the `lint` phase of the `Dockerfile`.
   `make lint`.
-- `script/fmt`: formats the Go code with `gofmt` and the Markdown with prettier.
-  `make fmt`.
+- `script/fmt`: formats the Go code with `gofmt` and then `golines -m 77`, and
+  the Markdown with prettier. `make fmt`.
+    - `golines` wraps code at 77 columns but leaves comments and strings alone.
+      Wrap those by hand.
+    - The linter fails only lines longer than 88 columns.
 - `script/fmt-check`: checks the formatting and changes nothing.
   `make fmt-check`.
 - `script/check`: runs `script/test`, `script/lint` and `script/fmt-check`.