fix: pass the HTTP private-host allowlist into the maintenance container

backend/scripts/p2-acceptance.mjs

@@ -779,7 +779,10 @@ async function writeInstallationFiles(ctx) {
       },
       "workspace-maintenance": {
         image: ctx.coreImageTag,
-        environment: { P2_CHILD_DEBUG: "1" },
+        environment: {
+          P2_CHILD_DEBUG: "1",
+          THT_EVIDENCE_PRIVATE_HOST_ALLOWLIST: "host.docker.internal",
+        },
         extra_hosts: ["host.docker.internal:host-gateway"],
       },
       qdrant: {