Allow external access to local dev server

- Bind orchard-server port to 0.0.0.0 for LAN testing
- Add KICS exception for unbound port (local dev only)

docker-compose.local.yml

@@ -6,7 +6,7 @@ services:
       context: .
       dockerfile: Dockerfile.local
     ports:
-      - "127.0.0.1:8080:8080"
+      - "0.0.0.0:8080:8080"
     environment:
       - ORCHARD_SERVER_HOST=0.0.0.0
       - ORCHARD_SERVER_PORT=8080

kics.config

@@ -43,3 +43,9 @@ exclude-queries:
   # Reason: LOCAL DEVELOPMENT ONLY. Related to above - security_opt is not set
   # on database services because no-new-privileges breaks them.
   - 610e266e-6c12-4bca-9925-1ed0cd29742b
+
+  # Container Traffic Not Bound To Host Interface (MEDIUM)
+  # Reason: LOCAL DEVELOPMENT ONLY. The orchard-server port is bound to 0.0.0.0
+  # to allow testing from other machines on the local network. This is only in
+  # docker-compose.local.yml, not production deployments.
+  - 451d79dc-0588-476a-ad03-3c7f0320abb3