[security] Remove innerHTML usage from searchView.js

Refactored `js/searchView.js` to use safe DOM APIs (`document.createElement`, `replaceChildren`, `textContent`) instead of `innerHTML`.
This reduces the attack surface for XSS vulnerabilities.
Updated `scripts/check-innerhtml.mjs` baseline.
Verified with unit tests and a frontend verification script.

Co-authored-by: PR0M3TH3AN <[email protected]>

scripts/check-innerhtml.mjs

@@ -31,7 +31,6 @@ const BASELINE = {
   "js/historyView.js": 4,
   "js/index.js": 1,
   "js/kidsView.js": 1,
-  "js/searchView.js": 12,
   "js/subscriptions.js": 7,
   "js/ui/components/DeleteModal.js": 3,
   "js/ui/components/EditModal.js": 1,