Remediate all lint findings under the canonical golangci-lint config

Fix every finding surfaced by the canonical .golangci.yml with
golangci-lint v2.12.2 (refs #61), behavior-preserving throughout:

- err113: dynamic errors replaced with package-level sentinels and %w
  wrapping; direct comparisons converted to errors.Is
- goprintffuncname: printf-style helpers renamed with an f suffix
  (ui.Writer message methods, cli.ReportErrorf, database.Fatalf,
  vaultik stdoutf) and all call sites updated
- revive: stuttering type names renamed (blob.Handler, blob.WithReader,
  blob.ChunkPosition, storage.URL, storage.Info), doc comments added,
  unused parameters blanked, package comments added
- contextcheck/noctx: ctx threaded through blob.Packer
  (AddChunk/Flush/FinalizeBlob/PackChunks) and scanner call sites;
  context-aware exec and sql variants used
- funlen/cyclop/gocognit/nestif/dupl: oversized or duplicated
  functions split into focused helpers across production and test code
- paralleltest/tparallel/thelper/usetesting/testpackage: tests
  parallelized where safe (global log.Initialize kept in the serial
  phase), helpers marked, t.TempDir adopted, external test packages
  where only exported API is used
- gosec: integer conversions clamped or justified, header timeouts
  added, remaining findings suppressed with per-site justifications
- mnd/goconst/lll/wsl_v5/nlreturn/noinlineerr/errcheck and other
  mechanical findings fixed directly

Remove the deprecated log.LogOptions alias (callers migrated to
log.Options). make check is green.

internal/cli/config_test.go

@@ -1,4 +1,4 @@
-package cli
+package cli //nolint:testpackage // exercises unexported yamlPathGet/yamlPathSet
 
 import (
 	"strings"
@@ -11,6 +11,8 @@ import (
 // TestDefaultConfigTemplateParses ensures the init template is valid YAML
 // that unmarshals into the Config struct with the expected snapshots.
 func TestDefaultConfigTemplateParses(t *testing.T) {
+	t.Parallel()
+
 	var cfg config.Config
 
 	err := yaml.Unmarshal([]byte(defaultConfigTemplate), &cfg)
@@ -76,6 +78,8 @@ func parseTestYAML(t *testing.T) *yaml.Node {
 }
 
 func TestYAMLPathGet(t *testing.T) {
+	t.Parallel()
+
 	root := parseTestYAML(t)
 
 	tests := []struct {
@@ -96,6 +100,8 @@ func TestYAMLPathGet(t *testing.T) {
 
 	for _, tt := range tests {
 		t.Run(tt.path, func(t *testing.T) {
+			t.Parallel()
+
 			node, err := yamlPathGet(root, splitPath(tt.path))
 			if tt.err {
 				if err == nil {
@@ -117,32 +123,40 @@ func TestYAMLPathGet(t *testing.T) {
 }
 
 func TestYAMLPathSet(t *testing.T) {
+	t.Parallel()
+
 	root := parseTestYAML(t)
 
 	// Overwrite existing nested value
-	if err := yamlPathSet(root, splitPath("s3.bucket"), "newbucket"); err != nil {
+	err := yamlPathSet(root, splitPath("s3.bucket"), "newbucket")
+	if err != nil {
 		t.Fatalf("set s3.bucket: %v", err)
 	}
 
 	// Create new nested key with intermediate map
-	if err := yamlPathSet(root, splitPath("s3.endpoint"), "s3.example.com"); err != nil {
+	err = yamlPathSet(root, splitPath("s3.endpoint"), "s3.example.com")
+	if err != nil {
 		t.Fatalf("set s3.endpoint: %v", err)
 	}
 
-	if err := yamlPathSet(root, splitPath("newmap.newkey"), "val"); err != nil {
+	err = yamlPathSet(root, splitPath("newmap.newkey"), "val")
+	if err != nil {
 		t.Fatalf("set newmap.newkey: %v", err)
 	}
 
 	// Overwrite a sequence element and append a new one
-	if err := yamlPathSet(root, splitPath("age_recipients.0"), "age1bbb"); err != nil {
+	err = yamlPathSet(root, splitPath("age_recipients.0"), "age1bbb")
+	if err != nil {
 		t.Fatalf("set age_recipients.0: %v", err)
 	}
 
-	if err := yamlPathSet(root, splitPath("age_recipients.1"), "age1ccc"); err != nil {
+	err = yamlPathSet(root, splitPath("age_recipients.1"), "age1ccc")
+	if err != nil {
 		t.Fatalf("append age_recipients.1: %v", err)
 	}
 
-	if err := yamlPathSet(root, splitPath("age_recipients.5"), "age1ddd"); err == nil {
+	err = yamlPathSet(root, splitPath("age_recipients.5"), "age1ddd")
+	if err == nil {
 		t.Error("expected out-of-range append to fail")
 	}
 
@@ -154,7 +168,11 @@ func TestYAMLPathSet(t *testing.T) {
 
 	text := string(out)
 
-	for _, want := range []string{"newbucket", "s3.example.com", "newkey: val", "# top comment", "# inline comment", "age1bbb", "age1ccc"} {
+	wants := []string{
+		"newbucket", "s3.example.com", "newkey: val",
+		"# top comment", "# inline comment", "age1bbb", "age1ccc",
+	}
+	for _, want := range wants {
 		if !contains(text, want) {
 			t.Errorf("round-tripped YAML missing %q:\n%s", want, text)
 		}