codex/fix podman e2e host fixtures

[drew]

Summary

Make Podman E2E support containers reachable by the host-networked supervisor.

Related Issue

Stability investigation stacked on #3604 and ultimately #3583. Managed Podman run 35855891110 passed credential gating, then failed its GraphQL fixture because the supervisor could not resolve a Podman network-scoped DNS alias.

Changes

• Publish Podman HTTP fixture ports on the host and address them through the driver's pinned host.openshell.internal alias.
• Keep Docker fixture routing through its bridge address where a Docker network is configured.
• Document this Podman supervisor and fixture boundary.

Testing

• mise run pre-commit: passed.
• mise run ci: passed.
• Focused local Podman GraphQL E2E: passed (1 test, 14.09s); CLI conformance also passed.

Checklist

• Signed-off conventional commit
• Documentation updated
• Full local CI passed
• Focused Podman E2E passed

[copy-pr-bot]

Auto-sync is disabled for draft pull requests in this repository. Workflows must be run manually.

Contributors can view more details about this message here.

[drew]

Closing to narrow the automated flake investigation to the four selected fixes (#3583/#3588, #3598, #3604, #3608). The findings remain available here for later follow-up.