feat: add desktop document search and verified native CPU embeddings

crates/searchi-cli/README.md

@@ -7,6 +7,8 @@ GPU setup. Index only folders you explicitly choose.
 cargo run -p searchi-cli -- index --db ./searchi.db --root ./documents
 cargo run -p searchi-cli -- search --db ./searchi.db "termination clause" --limit 10
 cargo run -p searchi-cli -- search --db ./searchi.db "invoice" --json
+cargo run -p searchi-cli -- search --db ./searchi.db "invoice" --extension pdf --min-size 1024 --json
+cargo run -p searchi-cli -- index --db ./searchi.db --root ./documents --exclude private
 cargo run -p searchi-cli -- stats --db ./searchi.db --json
 ```
 
@@ -23,6 +25,12 @@ snippet, ranking score, and match kind. An empty search emits `[]`. `stats --jso
 emits an object with `files` and `content_files`. JSON is the scripting interface;
 the human-readable output may change as preview support develops.
 
-The foundation CLI searches filenames and extracted text. Semantic inference,
-document formats beyond the core extractor, and desktop integration remain
-tracked in the project roadmap; this interface does not fabricate embeddings.
+The CLI searches filenames, bounded text, PDF text and DOCX paragraphs. Results
+include actual matching source locations when available and extraction errors
+for documents that could not be read. Semantic inference and media formats
+remain tracked in the roadmap; this interface does not fabricate embeddings.
+
+Filters apply before result limits: `--folder`, `--extension`, `--min-size`,
+`--max-size`, `--modified-after-ms`, and `--modified-before-ms`. Dates are Unix
+milliseconds and inclusive. Repeated `index --exclude NAME` flags add directory
+names to the defaults (`.git`, `node_modules`, `target`).