chore(Docker): restrict port binding to local network

[benforshey]

Per our internal conversation with security, we're binding these ports to localhost to prevent exposing a non-https service to the public internet.