duffel-proxy · GET /search?origin=JFK&destination=LHR&date=2026-06-01
             · GET /places?query=lon

CORS-enabled, search-only proxy for the Duffel flight API.
Booking is not proxied.