chore(dev): wire SearXNG + mana-search into dev:mana:all

News Research's web-search backend (mana-search → SearXNG) was missing
from the standard dev stack — a "Finden" click failed with a connect
error until the standalone services/mana-search/docker-compose.dev.yml
was started by hand.

- docker-compose.dev.yml: add `searxng` (Port 8080), config mounted
  read-only from the service tree. Reuses the shared mana-redis,
  no second cache instance needed.
- package.json: docker:up + docker🆙infra include searxng;
  dev:mana:servers spawns dev:search alongside the other 6 servers;
  dev:search now passes PORT=3021 + REDIS auth so it talks to the
  shared password-protected mana-redis instead of defaulting to a
  no-auth localhost:6379

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

docker-compose.dev.yml

@@ -44,6 +44,31 @@ services:
       timeout: 5s
       retries: 5
 
+  # SearXNG — meta-search engine used by mana-search.
+  # Backend for web-search features (e.g. News Research feed discovery).
+  # Config mounted read-only from the service's own tree so it stays in
+  # sync with the production compose.
+  searxng:
+    image: searxng/searxng:latest
+    container_name: mana-searxng
+    restart: unless-stopped
+    volumes:
+      - ./services/mana-search/searxng/settings.yml:/etc/searxng/settings.yml:ro
+      - ./services/mana-search/searxng/limiter.toml:/etc/searxng/limiter.toml:ro
+    environment:
+      SEARXNG_BASE_URL: http://localhost:8080
+      SEARXNG_SECRET: ${SEARXNG_SECRET:-dev-secret-change-in-production}
+    ports:
+      - "8080:8080"
+    networks:
+      - mana-network
+    healthcheck:
+      test: ["CMD", "wget", "-q", "--spider", "http://localhost:8080/healthz"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 15s
+
   # Mailpit — fake SMTP server for local development.
   # Catches every outbound mail and exposes them via web UI + REST API.
   # Point any service that sends email at SMTP_HOST=mailpit, SMTP_PORT=1025

package.json

@@ -187,8 +187,8 @@
 		"dev:traces:mobile": "pnpm --filter @traces/mobile dev",
 		"dev:traces:full": "concurrently -n auth,sync,api -c blue,magenta,yellow \"pnpm dev:auth\" \"pnpm dev:sync\" \"pnpm dev:api\"",
 		"dev:landing-builder": "pnpm --filter @mana-landing-builder/service start:dev",
-		"docker:up": "docker compose -f docker-compose.dev.yml --env-file .env.development up -d postgres redis minio minio-init",
-		"docker:up:infra": "docker compose -f docker-compose.dev.yml --env-file .env.development up -d postgres redis minio minio-init",
+		"docker:up": "docker compose -f docker-compose.dev.yml --env-file .env.development up -d postgres redis minio minio-init searxng",
+		"docker:up:infra": "docker compose -f docker-compose.dev.yml --env-file .env.development up -d postgres redis minio minio-init searxng",
 		"docker:up:db": "docker compose -f docker-compose.dev.yml --env-file .env.development up -d postgres redis",
 		"docker:up:auth": "docker compose -f docker-compose.dev.yml --env-file .env.development --profile auth up -d",
 		"docker:up:chat": "docker compose -f docker-compose.dev.yml --env-file .env.development --profile chat up -d",
@@ -219,7 +219,7 @@
 		"cf:login": "npx wrangler login",
 		"cf:projects:list": "npx wrangler pages project list",
 		"cf:projects:create": "echo 'Creating Cloudflare Pages projects...' && npx wrangler pages project create chat-landing --production-branch=main && npx wrangler pages project create picture-landing --production-branch=main && npx wrangler pages project create mana-landing --production-branch=main && npx wrangler pages project create cards-landing --production-branch=main && npx wrangler pages project create quotes-landing --production-branch=main",
-		"dev:search": "cd services/mana-search && go run ./cmd/server",
+		"dev:search": "cd services/mana-search && PORT=3021 SEARXNG_URL=http://localhost:8080 REDIS_HOST=localhost REDIS_PORT=6379 REDIS_PASSWORD=${REDIS_PASSWORD:-devpassword} go run ./cmd/server",
 		"dev:crawler": "cd services/mana-crawler && go run ./cmd/server",
 		"dev:credits": "cd services/mana-credits && bun run --watch src/index.ts",
 		"dev:notify": "cd services/mana-notify && go run ./cmd/server",
@@ -257,7 +257,7 @@
 		"dev:manavoxel:local": "concurrently -n sync,web -c magenta,cyan \"pnpm dev:sync\" \"pnpm dev:manavoxel:web\"",
 		"dev:media": "cd services/mana-media/apps/api && bun run --hot src/index.ts",
 		"dev:geocoding": "cd services/mana-geocoding && bun run --watch src/index.ts",
-		"dev:mana:servers": "concurrently -n auth,sync,api,media,crawler,credits -c blue,magenta,yellow,green,cyan,red \"pnpm dev:auth\" \"pnpm dev:sync\" \"pnpm dev:api\" \"pnpm dev:media\" \"pnpm dev:crawler\" \"pnpm dev:credits\""
+		"dev:mana:servers": "concurrently -n auth,sync,api,media,crawler,credits,search -c blue,magenta,yellow,green,cyan,red,gray \"pnpm dev:auth\" \"pnpm dev:sync\" \"pnpm dev:api\" \"pnpm dev:media\" \"pnpm dev:crawler\" \"pnpm dev:credits\" \"pnpm dev:search\""
 	},
 	"devDependencies": {
 		"@mana/eslint-config": "workspace:*",