App-facing search facade over the catalog search.
This module keeps the command boundary stable while the catalog layer owns the actual search error semantics.