refactor(core): base64-encode the ripgrep mirror host

Same convention as codev-gateway's const.ts: keeps the host out of
casual greps, not a secret. The test's plain-text URL assertion now
doubles as proof the encoded value decodes to the right mirror.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Author: quickbeard

packages/core/src/ripgrep/binary.ts

@@ -16,7 +16,9 @@ export namespace RipgrepBinary {
   // mirrors the official executables for this VERSION (raw, not archived) at
   // rg-<version>-<platform>-<arch>[.exe]. Bumping VERSION requires hosting the
   // new binaries there first; codevhub pins the same version in lib/ripgrep.ts.
-  const MIRROR = "https://netmind.viettel.vn/codev/docs/code/downloads"
+  // Base64 (like codev-gateway's const.ts) to keep the host out of casual
+  // greps, not as a secret.
+  const MIRROR = atob("aHR0cHM6Ly9uZXRtaW5kLnZpZXR0ZWwudm4vY29kZXYvZG9jcy9jb2RlL2Rvd25sb2Fkcw==")
   const PLATFORM = {
     "arm64-darwin": { platform: "aarch64-apple-darwin", extension: "tar.gz" },
     "arm64-linux": { platform: "aarch64-unknown-linux-gnu", extension: "tar.gz" },