Desearch

Reviewed overlay for SN22 using the official Desearch website, docs, public OpenAPI schema, console, and source repository. The OpenAPI schema advertises api.desearch.ai as the API server; protected method calls require separate review before proxy eligibility. Confirmed the schema's global security requirement (ApiKeyAuth) applies to all 35 documented paths with no exceptions -- the only genuinely public surfaces on this host are the base URL, /health, and the OpenAPI schema itself, all already tracked. 4 surfaces had no probe config at all -- the registry-wide gap tracked in #5932 -- fixed.