feat: Add SearXNG module and update infrastructure

- Introduced a new SearXNG module with configuration for Kubernetes deployment, service, and ingress.
- Updated existing Terraform app modules to include SearXNG in both dev-01 and prod-01 environments.
- Added necessary variables and secrets for SearXNG in the respective Terraform files.
- Updated Dockerfiles for llama.cpp and ollama to use latest versions.
- Enhanced security and hardening defaults in Kubernetes deployments.
- Improved documentation for Copilot instructions and Terraform workflows.

terraform/apps/dev-01/config.tf

@@ -111,6 +111,11 @@ locals {
           name    = "music"
           type    = "CNAME"
           content = "dev-01.${local.lab_domain}."
+        },
+        {
+          name    = "search"
+          type    = "CNAME"
+          content = "dev-01.${local.lab_domain}."
         }
       ]
     }
@@ -234,6 +239,11 @@ locals {
   # mstream
   mstream_music_folder = "/mnt/storage/Music"
   mstream_fqdn         = "music.${local.lab_domain}"
+
+  # searxng
+  searxng_folder = "/mnt/md0/searxng"
+  searxng_fqdn   = "search.${local.lab_domain}"
+  searxng_issuer = "letsencrypt-prod"
 }
 
 data "terraform_remote_state" "scaleway" {