vfprintf: Rewrite printf_positional to use struct scratch_buffer