searxng: migrate to envFrom; move remaining literals into Infisical

Non-secret config now lives in Infisical alongside the secrets, so containers carry envFrom only and no loose env entries.

applications/zipline/postgres/zipline-postgres-statefulset.yaml

@@ -34,9 +34,6 @@ spec:
           envFrom:
             - secretRef:
                 name: zipline-postgres-secrets
-          env:
-            - name: PGDATA
-              value: /var/lib/postgres/data
       volumes:
         - name: zipline-postgresql-database
           persistentVolumeClaim:

applications/zipline/zipline/zipline-statefulset.yaml

@@ -38,9 +38,6 @@ spec:
           envFrom:
             - secretRef:
                 name: zipline-app-secrets
-          env:
-            - name: CORE_TRUSTED_PROXIES
-              value: "10.42.0.0/16"
       restartPolicy: Always
       volumes: 
         - name: uploads