Add __attribute__((format_arg(1))) to the declaration of err_gettext(),

to restore gcc's ability to crosscheck format arguments within elog.c.
Noted in a test compilation with -Wformat-nonliteral enabled.