fix: explicitly encode overseer search query

backend/src/routes/overseer.ts

@@ -64,7 +64,9 @@ router.get(
 	asyncHandler(async (req: AuthenticatedRequest, res) => {
 		const { query } = req.query;
 		if (!query) return res.status(400).json({ error: "Query required" });
-		const response = await overseerClient.get("/search", { params: { query } });
+		const response = await overseerClient.get(
+			`/search?query=${encodeURIComponent(query as string)}`,
+		);
 		res.json(response.data);
 	}),
 );