Use clang-format to enforce style