How to set up a Go module proxy: from install to GOPROXY and private modules

After self-hosting, wire Go: create a PROXY for proxy.golang.org, configure GOPROXY/GOPRIVATE/GONOSUMDB and .netrc, and verify public cache plus private Git modules.