Bind directly to HF port when nginx is unavailable

Harden HF runtime against proc-scan and startup egress flags

Prevent inherited upstream CMD from triggering HF proc scan

Avoid searxng runtime path in process cmdline

Harden single SearXNG Space guardrails

Fix HF proc scan-safe bootstrap