fix: panic hangs the cli

A panic while formatting a file left the queue's busy count up, so
the other threads waited forever, and the worker's results were
lost. The format of each file now runs under catch_unwind, and a
panic is an error for that file, with a new formatter after it.