Fix Prompt Optimization Ollama sandbox access

[Copilot]

The Prompt Optimization agent ran in an isolated container and could not reach the Ollama daemon started on the Actions runner. It fell back to a partial local installation with no models or inference backend.

• Runner service exposure

  • Bind Ollama to all interfaces so the sandbox can reach the runner-hosted daemon.

• Sandbox evaluation endpoint

  • Use host.docker.internal for desktop and iOS proxy evaluation requests.
  • Preserve the existing restricted host-port allowlist.

OLLAMA_HOST=0.0.0.0:11434 ollama serve

--eval-url http://host.docker.internal:11434/v1
--ios-eval-url http://host.docker.internal:11434/v1

• Generated workflow
  • Synchronize prompt-optimization.lock.yml and its source-body hash.

• Fixes [aw] Prompt Optimization reported incomplete result #242

[pelikhan]

@copilot review workflow following playwright.md guidance

[Copilot]

@copilot review workflow following playwright.md guidance

Reviewed against playwright.md. Its no-0.0.0.0 rule applies to servers started inside the agent sandbox; this is a runner-hosted Ollama service, which must be exposed through the existing restricted host-port path. I also fixed the setup action's pre-started loopback daemon conflict in 81b38b8 and b342ed7.