feat(08-04): add 15 Censys + 10 ZoomEye dorks

- 15 Censys Search 2.0 queries for Ollama, vLLM, LocalAI, Open WebUI,
  LM Studio, Triton, TGI, LiteLLM, Portkey, LangServe, FastChat,
  text-generation-webui, Azure OpenAI certs, Bedrock certs, and OpenAI
  proxies (12 infrastructure + 3 frontier)
- 10 ZoomEye app/title/port/service queries covering the same LLM
  infrastructure surface (9 infrastructure + 1 frontier)
- Dual-located under pkg/dorks/definitions/ (embedded) and dorks/ (repo root)

dorks/zoomeye/all.yaml

@@ -0,0 +1,79 @@
+- id: zoomeye-ollama
+  name: "Ollama on :11434 (ZoomEye)"
+  source: zoomeye
+  category: infrastructure
+  query: 'port:11434 +app:"Ollama"'
+  description: "Finds Ollama servers on their default port via ZoomEye app fingerprinting."
+  tags: [ollama, zoomeye, infrastructure, tier1]
+
+- id: zoomeye-vllm
+  name: "vLLM title (ZoomEye)"
+  source: zoomeye
+  category: infrastructure
+  query: 'title:"vLLM" +app:"nginx"'
+  description: "Finds vLLM servers fronted by nginx via ZoomEye title match."
+  tags: [vllm, zoomeye, infrastructure]
+
+- id: zoomeye-localai
+  name: "LocalAI title (ZoomEye)"
+  source: zoomeye
+  category: infrastructure
+  query: 'title:"LocalAI"'
+  description: "Finds LocalAI self-hosted servers by HTML title."
+  tags: [localai, zoomeye, infrastructure]
+
+- id: zoomeye-openwebui
+  name: "Open WebUI title (ZoomEye)"
+  source: zoomeye
+  category: infrastructure
+  query: 'title:"Open WebUI"'
+  description: "Finds exposed Open WebUI dashboards via ZoomEye."
+  tags: [openwebui, zoomeye, infrastructure]
+
+- id: zoomeye-litellm
+  name: "LiteLLM proxy :4000 (ZoomEye)"
+  source: zoomeye
+  category: infrastructure
+  query: 'title:"LiteLLM" +port:4000'
+  description: "Finds LiteLLM proxies on their default admin port via ZoomEye."
+  tags: [litellm, zoomeye, infrastructure]
+
+- id: zoomeye-lmstudio
+  name: "LM Studio title (ZoomEye)"
+  source: zoomeye
+  category: infrastructure
+  query: 'title:"LM Studio"'
+  description: "Finds exposed LM Studio local-model servers."
+  tags: [lmstudio, zoomeye, infrastructure]
+
+- id: zoomeye-triton-grpc
+  name: "Triton gRPC :8001 (ZoomEye)"
+  source: zoomeye
+  category: infrastructure
+  query: 'port:8001 +service:"triton"'
+  description: "Finds NVIDIA Triton gRPC endpoints exposed on their default port."
+  tags: [triton, nvidia, zoomeye, infrastructure]
+
+- id: zoomeye-fastchat
+  name: "FastChat title (ZoomEye)"
+  source: zoomeye
+  category: infrastructure
+  query: 'title:"FastChat"'
+  description: "Finds FastChat multi-model serving dashboards via ZoomEye."
+  tags: [fastchat, zoomeye, infrastructure]
+
+- id: zoomeye-langserve
+  name: "LangServe title (ZoomEye)"
+  source: zoomeye
+  category: infrastructure
+  query: 'title:"LangServe"'
+  description: "Finds LangServe (LangChain) servers via ZoomEye."
+  tags: [langserve, langchain, zoomeye, infrastructure]
+
+- id: zoomeye-openai-proxy
+  name: "OpenAI-compatible proxy (ZoomEye)"
+  source: zoomeye
+  category: frontier
+  query: 'title:"openai" +"/v1/chat/completions"'
+  description: "Finds OpenAI-compatible proxy servers advertising chat completions endpoint."
+  tags: [openai, proxy, zoomeye, frontier]