feat: Add SearXNG module and update infrastructure

- Introduced a new SearXNG module with configuration for Kubernetes deployment, service, and ingress.
- Updated existing Terraform app modules to include SearXNG in both dev-01 and prod-01 environments.
- Added necessary variables and secrets for SearXNG in the respective Terraform files.
- Updated Dockerfiles for llama.cpp and ollama to use latest versions.
- Enhanced security and hardening defaults in Kubernetes deployments.
- Improved documentation for Copilot instructions and Terraform workflows.

terraform/apps/prod-01/apps.tf

@@ -82,7 +82,7 @@ module "gitea" {
     mail_from            = "gitea@${local.primary_domain}"
     no_reply_address     = "no-reply@${local.primary_domain}"
     smtp_user            = var.scaleway_project_id
-    db_password          = var.gitea_mysql_password
+    db_passwd            = var.gitea_mysql_password
     smtp_host            = local.scaleway_smtp_host
     smtp_port            = local.scaleway_smtp_port
     smtp_user            = var.scaleway_project_id

terraform/apps/prod-01/resources/alexpires.me.conf

@@ -1,7 +1,7 @@
 resolver kube-dns.kube-system.svc.cluster.local valid=10s;
 
 location ^~ /api/ssh_locker/ {
-    rewrite ^/api/ssh_locker/(.*)$ /$1 break;
+    rewrite ^/api/ssh_locker/(?<path>.*)$ /$path break;
     proxy_pass https://backend.ssh-locker-web.svc.cluster.local;
     proxy_set_header Host $host;
     proxy_set_header X-Real-IP $remote_addr;