dev_agentandClaude Opus 5.5
944299b455
deploy/searxng/settings.yml enables the json format, turns off the public limiter and bot detection (internal use only) and keeps only general web search engines; the secret key comes from SEARXNG_SECRET in the git-ignored deploy/secrets/searxng.env. deploy/compose.yaml adds the searxng service (digest-pinned image, mealquest network only, no published port, healthcheck, read-only root) and sets MEALQUEST_SEARXNG_URL=http://searxng:8080 for mealquest. deploy/compose.dev.yaml publishes it on 127.0.0.1:8888 for development. RUNBOOK and .env.example document the new secret and checks. Task 641f468b-68e9-42e2-b640-3199984cf75c. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>