fix: favor snprintf over insecure sprintf

[ricochet]

When building with clang and warnings, I bumped into a warning about a potential buffer overflow.

This is easily mitigated by changing to snprintf.