## Summary
- Sets `ALLOW_PRIVATE_OVERLAY_URLS=true` on the `sink` Deployment in the `local` overlay only -- pairs with [sink#121](https://github.com/plevion-dev/sink/pull/121). `local` is LAN-only (MetalLB hands out RFC1918 addresses for `plevion.com` et al.), so sink's SSRF guard needs this bypass to let interactive-overlay sources point at this platform's own frontend-overlays render pages. Never set in a dev/prod overlay.