feat: Go SearXNG client; throttled is not absence (#16)

skills/web-search/SKILL.md

@@ -1,25 +1,30 @@
 ---
 name: web-search
 description: >-
-  Search the public web through the self-hosted SearXNG at search.ops.io
-  using bin/web/search. Use for German care law, SGB paragraphs, vendor
-  documentation and any fact that is not in our own repos - and as the second
-  independent source the detective method requires.
+  Search the public web through SearXNG using bin/web/search.go. Use for vendor
+  documentation, public standards, and any fact that is not in our own repos —
+  and as the second independent source the detective method requires.
 ---
 
 # web-search
 
 ```bash
-bin/web/search "LadybugDB vector index"
-bin/web/search "model2vec multilingual" --category it
-bin/web/search "hypervisor" --site ops.io --json | jq -r '.results[].url'
-bin/web/search "postgres partial index" --lang en --fresh year
+bin/web/search.go "LadybugDB vector index"
+bin/web/search.go "model2vec multilingual" --category it
+bin/web/search.go "hypervisor" --site example.com --json | jq -r '.results[].url'
+bin/web/search.go "postgres partial index" --lang en --fresh year
 ```
 
+URL and optional Basic Auth live in `$BRAIN_SEARCH_ENV` (default
+`$HOME/.config/brain/search.env`): `BRAIN_SEARCH_URL` is required;
+`BRAIN_SEARCH_USER` / `BRAIN_SEARCH_PASS` only if the instance uses Basic Auth.
+A host that already runs SearXNG should set `BRAIN_SEARCH_URL` and not start
+the Compose profile.
+
 ## Web or knowledge base
 
 `bin/brain/search.go` holds our own facts: the ops stack, portfolio, ssh hosts,
-the lexicon. Go there first. Reach for `bin/web/search` when the answer is
+the lexicon. Go there first. Reach for `bin/web/search.go` when the answer is
 outside our repos: upstream library behaviour, vendor documentation, public
 standards.