Make format script more robust.

* Use find -print0 | xargs -0 to cope with filenames containing unusual
  characters.
* Don't repeat the clang-format command, so if it ever changes it need
  only be updated in one place.