feat: Add SearXNG module and update infrastructure

- Introduced a new SearXNG module with configuration for Kubernetes deployment, service, and ingress.
- Updated existing Terraform app modules to include SearXNG in both dev-01 and prod-01 environments.
- Added necessary variables and secrets for SearXNG in the respective Terraform files.
- Updated Dockerfiles for llama.cpp and ollama to use latest versions.
- Enhanced security and hardening defaults in Kubernetes deployments.
- Improved documentation for Copilot instructions and Terraform workflows.

terraform/apps/dev-01/apps.tf

@@ -5,7 +5,7 @@ module "open-webui" {
   fqdn              = local.open_webui_fqdn
   ollama_proxy      = local.ollama_proxy
   secret_key        = var.webui_secret_key
-  tag               = "0.6-slim"
+  tag               = "v0.9.2-slim"
   log_level         = local.open_webui_log_level
 }
 
@@ -82,3 +82,13 @@ module "mstream" {
   music_folder      = local.mstream_music_folder
   fqdn              = local.mstream_fqdn
 }
+
+module "searxng" {
+  source = "../../modules/apps/searxng"
+
+  persistent_folder = local.searxng_folder
+  fqdn              = local.searxng_fqdn
+  issuer            = local.searxng_issuer
+  tag               = "2026.5.2-aefc3c316"
+  secret_key        = var.searxng_secret_key
+}