Add degoog as the search provider, and make it the default

The operator already runs it, so this is the one provider that costs nothing to adopt: no key,
no card, no third party, and no new container. It aggregates several engines and returns them
merged, and its /api/search reply is already the shape everything downstream expects — title,
url, snippet, with content as a fallback for the roughly one result in six that has no snippet.

It is also now the only provider whose response has been read from a live service rather than
from documentation, which is why it is the default.

Deployment/host.conf.template

@@ -585,6 +585,7 @@
 # Per-host because one is an address on this network and the other is a credential. Only the
 # General Chat profile can use these — it is the profile that cannot change anything, which is
 # why it is the one allowed to look outside. Off until AI_WEB_SEARCH_ENABLED says otherwise.
+    HOSTN_DEGOOG_URL=""                          # e.g. http://localhost:4444 — self-hosted, no key, /api/search
     HOSTN_SEARXNG_URL=""                         # e.g. http://localhost:8888 — needs format: [json] in its settings.yml
     HOSTN_WEB_SEARCH_API_KEY=""                  # brave or tavily; unused when the provider is searxng
     HOSTN_OLLAMA_EMBED_MODEL="nomic-embed-text"  # embeddings — the generation model cannot embed

Deployment/master.conf.template

@@ -1837,13 +1837,15 @@
 # when it is ticked. A question about this machine hands off to the assistant before the search
 # would run, so it never reaches the internet even with the box ticked.
 #
-# Provider: searxng | brave | tavily
+# Provider: degoog | searxng | brave | tavily
+#   degoog   self-hosted, no key — set HOST*_DEGOOG_URL. Aggregates several engines and returns
+#            them merged. The default, and the only one verified against a live service here
 #   searxng  self-hosted, no key, no third party — set HOST*_SEARXNG_URL, and enable format: [json]
 #            in its own settings.yml, which the default image ships with off
 #   brave    HOST*_WEB_SEARCH_API_KEY, free tier available
 #   tavily   HOST*_WEB_SEARCH_API_KEY
     AI_WEB_SEARCH_ENABLED=false
-    AI_WEB_SEARCH_PROVIDER=searxng
+    AI_WEB_SEARCH_PROVIDER=degoog
     AI_WEB_SEARCH_RESULTS=4
     AI_WEB_SEARCH_TIMEOUT=6