Prefers one installed system-wide (which is how the container image and most
Linux setups provide it, e.g. apt install stockfish) before looking in the
download cache. This keeps deployments from fetching a binary at runtime,
which a read-only or ephemeral filesystem would not survive.