Lay out the publishing test's return as every gofmt agrees, so the build seat's check passes

The toolchain the build seat runs merge-check.sh in (Go 1.26) and a newer local Go format a return of
several multi-line composite literals differently; the seat's is the one that judges, and it failed every
pull request on this file (novox/hq issue 283).

internal/bootstrap/publish_test.go

@@ -19,16 +19,17 @@ func publishing(t *testing.T, fetch func(string) (int, string, error),
 	run func(name string, args []string) (string, error)) (Options, Deps, *asked) {
 	t.Helper()
 	runtime := &asked{answer: run}
-	return Options{
-		Registry: "127.0.0.1:5000",
-		Timeout:  time.Second,
-		Wait:     0,
-	}, Deps{
+	// Each value named before it is returned: a return of several composite literals spanning lines is laid
+	// out differently by the gofmt of one Go release and the next, and the build seat's is the one that
+	// judges (novox/hq issue 283).
+	options := Options{Registry: "127.0.0.1:5000", Timeout: time.Second, Wait: 0}
+	deps := Deps{
 		Run: runtime.run,
 		Fetch: func(_ context.Context, url string) (int, string, error) {
 			return fetch(url)
 		},
-	}, runtime
+	}
+	return options, deps, runtime
 }
 
 // Nothing has ever been pushed under this name, so the registry says 404 — and that is an answer,