Search by constraints

Same engine as /api/v1/search and the MCP search_haircuts tool. Results never include an option that violates a hard constraint; if nothing matches, we say why.