## Summary
- Sets `ALLOW_PRIVATE_OVERLAY_URLS=true` on the `sink-capturer-worker` Deployment too, not just `sink`. The env var was only patched onto the `sink` Deployment (the API pod, where `is_public_url`/`fetch_content_type` validate the URL) -- the capturer worker is a separate Deployment that runs the actual Playwright navigation ([sink#122](https://github.com/plevion-dev/sink/pull/122)'s `ignore_https_errors`), and without the var there too, validation passed while the real `page.goto()` still failed with `NET::ERR_CERT_AUTHORITY_INVALID` -- confirmed live in `sink-capturer-worker`'s logs.