conjurer: give librarian 60s termination grace for checkpointing

The librarian now checkpoints an in-progress search on SIGTERM and exits
within CONJURER_LIBRARIAN_GRACEFUL_TIMEOUT (default 45s). Raise k8s
terminationGracePeriodSeconds to 60 so that graceful checkpoint isn't cut
short by SIGKILL - otherwise the long DB scan restarts instead of resuming.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

conjurer/kustomization.yaml

@@ -6,6 +6,6 @@ resources:
   - bot.yaml
 images:
   - name: gitea.czernobog.pl/gitea/conjurer-librarian
-    newTag: 8e18071b
+    newTag: 40605b95
   - name: gitea.czernobog.pl/gitea/conjurer-bot
     newTag: 8e18071b

conjurer/librarian.yaml

@@ -10,6 +10,11 @@ spec:
     metadata: { labels: { app: librarian } }
     spec:
       imagePullSecrets: [{ name: gitea-registry }]
+      # On SIGTERM the librarian checkpoints the running search and exits within
+      # CONJURER_LIBRARIAN_GRACEFUL_TIMEOUT (default 45s). Give k8s enough grace
+      # to let that finish before it SIGKILLs - otherwise a long scan's checkpoint
+      # is cut short and the search restarts from scratch instead of resuming.
+      terminationGracePeriodSeconds: 60
       containers:
         - name: librarian
           image: gitea.czernobog.pl/gitea/conjurer-librarian:e243777e