fix(ci): join service to runner network (#1)

docs/deployment/linux.md

@@ -49,9 +49,9 @@ Compose, then point `RENDEZVOUS_SMOKE_HTTP_URL` and
 and production-advertised service ports remain 8080/9050. Sibling-container CI
 runners may also set `RENDEZVOUS_CONFIG_SOURCE` and
 `RENDEZVOUS_SECRET_SOURCE` to host-visible absolute bind-source paths; local
-operators should normally keep the checked-in relative defaults. Those runners
-may set `RENDEZVOUS_HTTP_BIND_ADDRESS=0.0.0.0` and target their Docker host
-gateway; do not widen the default loopback HTTP binding on an ordinary host.
+operators should normally keep the checked-in relative defaults. CI attaches
+the service to the ephemeral job network for smoke traffic; it does not widen
+the default loopback HTTP publication.
 
 `deploy/compose/appsettings.Production.json` is a local/private-bridge smoke
 profile, not an Internet template: TCP is published only on host loopback, the