Adds 127.0.0.0/8 and ::1/128 so host-networked pods (buildkitd) are not blocked by the detection pipeline.