fix: set Host header on paperclip health probes to bypass hostname guard

The privateHostnameGuard middleware blocks requests where the Host header
is not in the allowlist. Kubelet httpGet probes use the pod IP as the
Host header, which is never in the allowlist. Setting Host: localhost
ensures probes are always permitted.

apps/base/paperclip/deployment.yaml

@@ -65,6 +65,9 @@ spec:
             httpGet:
               path: /api/health
               port: 3100
+              httpHeaders:
+                - name: Host
+                  value: localhost
             failureThreshold: 3
             initialDelaySeconds: 30
             periodSeconds: 30
@@ -74,6 +77,9 @@ spec:
             httpGet:
               path: /api/health
               port: 3100
+              httpHeaders:
+                - name: Host
+                  value: localhost
             failureThreshold: 3
             initialDelaySeconds: 10
             periodSeconds: 10