Network requirements

What must be reachable for bridge, gateway, Computer, and docs.

• Bridge 127.0.0.1:3100 on the server; public AI host via Cloudflare tunnel.
• OpenClaw gateway (default :18789) on the server network.
• Sandbox browser publishes 6080/9222 on 127.0.0.1 only — bridge refuses 0.0.0.0.
• Mac sand-gateway 127.0.0.1:3199 is local to the desktop.
• Docs: chazakah.dev serves static docs-site/ (not the bridge). Product close-gate must not apply to .dev.