didericis
b2927b1483
The gate's agent-facing leg sits on the `--internal` network, so the forwarder image cannot rely on apk/apt at startup. Surfaced by the DNS spike — a placeholder using `apk add socat` died silently and gave a false-negative DNS-on-internal result.
