v1.8.0: Full diagnostic sweep - 20 bugs fixed

Critical fixes:
- extractPages.helper.js: Pagination URL bug (?page → &page)
- package.json: Fixed invalid dep versions (axios, dotenv, express)
- privacy.html + tos.html: Broken footer links (//tos → /tos)
- manifest.json: Invalid icon purpose (any maskable → maskable)

High fixes:
- server.js: Removed duplicate CORS middleware (triple → single)
- search.controller.js: Cache key collision with suggestion controller
- apiRoutes.js: Dynamic endpoint count (was hardcoded 27)
- vercel.json: Removed duplicate CORS header

Medium fixes:
- header.config.js: Updated User-Agent to Chrome 130
- dataUrl.js: Removed redundant domain from ALT_DOMAINS
- category.extractor.js: Removed unused cheerio import
- server.js: Added __dirname, removed unused cors import

Documentation:
- CHANGELOG.md: Added v1.8.0 entry
- README.md: Updated version badges (1.8.0, Express 4.21)
- test.js: Fixed status endpoint (currently-airing → airing)

src/helper/extractPages.helper.js

@@ -80,7 +80,8 @@ import { headers } from "../configs/header.config.js";
  */
 const extractPages = async (url, page = 1) => {
   try {
-    const finalUrl = page > 1 ? `${url}?page=${page}` : url;
+    const separator = url.includes("?") ? "&" : "?";
+    const finalUrl = page > 1 ? `${url}${separator}page=${page}` : url;
     const { data } = await axios.get(finalUrl, { headers });
     const $ = cheerio.load(data);
     return $;