refactor(library): extract SearchController, add FULLTEXT search with XSS/operator sanitization
Migrates /library/search to a dedicated controller with GET-only form,
repository-backed FULLTEXT search on text/name, PageMeta titles, and
sanitization of FULLTEXT boolean operators to prevent SQL syntax errors.