test: complete runtime config lease matrix

backend/src/workspaces/runtime-config-lease.ts

@@ -96,7 +96,9 @@ export function normalizePrivateHostAllowlist(value: string | readonly string[]
     if (result.includes(host)) throw new Error("HTTP private host allowlist contains a duplicate hostname");
     result.push(host);
   }
-  return result;
+  // The policy is a set. Canonical ordering prevents semantically identical
+  // installation overlays from producing different durable config bytes.
+  return result.sort();
 }