perf: shared http.Transport with tuned connection pooling

Add internal/httpclient package as a singleton RoundTripper used by
all outbound engine requests (search, engines, autocomplete, upstream).

Key Transport settings:
- MaxIdleConnsPerHost = 20  (up from Go default of 2)
- MaxIdleConns = 100
- IdleConnTimeout = 90s
- DialContext timeout = 5s

Previously, the default transport limited each host to 2 idle connections,
forcing a new TCP+TLS handshake on every search for each engine. With
12 engines hitting the same upstream hosts in parallel, connections
were constantly recycled. Now warm connections are reused across all
goroutines and requests.

internal/engines/factory.go

@@ -22,13 +22,14 @@ import (
 	"time"
 
 	"github.com/metamorphosis-dev/samsa/internal/config"
+	"github.com/metamorphosis-dev/samsa/internal/httpclient"
 )
 
 // NewDefaultPortedEngines returns the Go-native engine registry.
 // If cfg is nil, API keys fall back to environment variables.
 func NewDefaultPortedEngines(client *http.Client, cfg *config.Config) map[string]Engine {
 	if client == nil {
-		client = &http.Client{Timeout: 10 * time.Second}
+		client = httpclient.NewClient(10 * time.Second)
 	}
 
 	var braveAPIKey, braveAccessToken, youtubeAPIKey string