Pull-based contract a parent host (e.g. CngxSelectShell with a search
input, future filter-driven hosts) implements so individual CngxOption
instances can compute their own hidden visibility from a host-owned
searchTerm signal and a host-owned matches policy.
Splitting policy from visibility keeps the option agnostic about HOW
filtering decides - substring, fuzzy, server-driven - and gives the
host a single point of control. Empty search term ALWAYS resolves to
"show everything"; the option short-circuits before calling matches.