Harden HF runtime against proc-scan and startup egress flags

Prevent inherited upstream CMD from triggering HF proc scan

Avoid searxng runtime path in process cmdline

Harden single SearXNG Space guardrails

Fix HF proc scan-safe bootstrap

fix(dockerfile): install wrapper at /usr/local/ingestics-svc/boot.sh

Bootstrap SearXNG instance from proven working config