Suricata

The clang-format script has a few bugs that made it report runs without formatting needs as erroring out, as well as ignore first commits on branches.

- empty commit list
- commit-filter off-by-one
- script success decided matching on git-clang-format known strings

Fix those, and the github workflow that calls it, which doesn't include main-* in the ignore list.