Runs whoami independently with a published port (8081:80) instead of
adding it to the Aegis docker-compose.yml. Envoy reaches it via
host.docker.internal:8081 — matches real-world usage where services
are not in the same Docker network as the gateway.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>