perf: reuse the output buffer

Formatter::format now prints into a buffer it keeps and returns a
borrow of it, like its other buffers. A new String per file faulted
in fresh pages for every output.