feat: Add SearXNG module and update infrastructure

- Introduced a new SearXNG module with configuration for Kubernetes deployment, service, and ingress.
- Updated existing Terraform app modules to include SearXNG in both dev-01 and prod-01 environments.
- Added necessary variables and secrets for SearXNG in the respective Terraform files.
- Updated Dockerfiles for llama.cpp and ollama to use latest versions.
- Enhanced security and hardening defaults in Kubernetes deployments.
- Improved documentation for Copilot instructions and Terraform workflows.

ansible/files/dockerfiles/Dockerfile.llamacpp.rocm

@@ -0,0 +1,14 @@
+FROM ghcr.io/ggml-org/llama.cpp:server-rocm
+
+ARG UID=1000
+ARG GID=1000
+RUN groupadd --system --gid ${GID} worker && \
+    useradd --system --gid ${GID} --uid ${UID} --home /home/worker worker && \
+    mkdir -p /home/worker && chown worker:worker /home/worker && \
+    cp /app/llama-server /home/worker/ && \
+    chmod +x /home/worker/llama-server && \
+    chown worker:worker /home/worker/llama-server
+
+WORKDIR /home/worker
+USER worker
+ENTRYPOINT ["/home/worker/llama-server"]

ansible/files/dockerfiles/Dockerfile.ollama

@@ -1,4 +1,4 @@
-FROM docker.io/ollama/ollama:0.13.4
+FROM docker.io/ollama/ollama:latest
 
 ARG UID=1000
 ARG GID=1000

ansible/files/dockerfiles/Dockerfile.ollama.rocm

@@ -1,4 +1,4 @@
-FROM docker.io/ollama/ollama:0.13.4-rocm
+FROM docker.io/ollama/ollama:rocm
 
 ARG UID=1000
 ARG GID=1000