config: stop using atof()

The atof() call can't detect errors in a reasonable way, but we still use it when parsing configuration files. We should fix that.

Let's not touch this till after #29211 (moved) is done, since that code is in flux.