fix: bind execution RPC endpoints to localhost

[pekkahcut]

While looking through the default docker compose setup, I noticed that
the execution RPC, websocket and metrics ports are exposed on all host
interfaces.

I changed these bindings to 127.0.0.1 so they are only reachable from
the local host by default.

The container ports stay the same, and I left the P2P ports unchanged
since those still need to be reachable for node communication.

This keeps the default setup a bit safer without changing how the
execution service works inside the container.

[cb-heimdall]

🟡 Heimdall Review Status

Requirement	Status	More Info
Reviews	🟡 0/2	Denominator calculation Show calculation 1 if user is bot 0 1 if user is external 0 2 if repo is sensitive 0 From .codeflow.yml 1 Additional review requirements Show calculation Max 0 0 From CODEOWNERS 0 Global minimum 0 Max 1 1 1 if commit is unverified 1 Sum 2

[cb-heimdall]

Review Error for mohamedelhalosy2023-stack @ 2026-08-22 03:33:16 UTC
User failed mfa authentication, see go/mfa-help