fix: search filters and add pre-commit build/test requirement

Search --protocol, --type, --tag filters were returning all results
because fallback returned true for unknown tools. Now correctly
excludes non-matching tools. Protocol filter also checks the
SearchResult.Protocol field directly before falling back to index.

Updated CLAUDE.md to require full build + test suite before every commit.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: rickcrawford

CLAUDE.md

@@ -45,6 +45,13 @@
 - Test: `go test ./...`
 - Lint: `go vet ./...`
 
+### Pre-Commit Requirements (MANDATORY)
+Before every commit, you MUST run both of these and verify they pass:
+1. **Full build:** `go build ./cmd/clictl/...`
+2. **Full test suite:** `go test ./...`
+
+Do NOT commit if either fails. Fix the issue first. No exceptions.
+
 ### Testing Requirements
 - **Run `go test ./...` after every code change** to catch regressions
 - **Every new feature must include unit tests** before it is considered complete