fix(staging): bind backend compose ports locally

docker-compose.yml

@@ -9,7 +9,7 @@ services:
       POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-growqr}
       POSTGRES_DB: ${POSTGRES_DB:-growqr}
     ports:
-      - "5432:5432"
+      - "127.0.0.1:15445:5432"
     volumes:
       - postgres-data:/var/lib/postgresql/data
     healthcheck:
@@ -33,8 +33,8 @@ services:
       GITEA__security__INSTALL_LOCK: "true"
       GITEA__service__DISABLE_REGISTRATION: "true"
     ports:
-      - "3001:3000"   # HTTP (Gitea listens on 3000 internally)
-      - "2222:2222"   # SSH
+      - "127.0.0.1:13001:3000"   # HTTP (Gitea listens on 3000 internally)
+      - "127.0.0.1:12222:2222"   # SSH
     volumes:
       - gitea-data:/data
     healthcheck:
@@ -50,8 +50,8 @@ services:
     image: rivetdev/engine:latest
     container_name: growqr-rivet
     ports:
-      - "6420:6420"   # API
-      - "6421:6421"   # Guard/edge
+      - "127.0.0.1:16420:6420"   # API
+      - "127.0.0.1:16421:6421"   # Guard/edge
     environment:
       RIVET__FILE_SYSTEM__PATH: /data
       RIVET__AUTH__ADMIN_TOKEN: ${RIVET_ADMIN_TOKEN:-dev-admin-token}
@@ -74,7 +74,7 @@ services:
       rivet-engine:
         condition: service_started
     ports:
-      - "4000:4000"
+      - "127.0.0.1:18012:4000"
     environment:
       PORT: 4000
       NODE_ENV: ${NODE_ENV:-production}