extraPortMappings unconditionally mapped all compose service ports
to the host, causing conflicts with local services (postgres 5432,
redis 6379, etc.). Now only services with network_mode: host get
port mappings. Ports 80/443 for Caddy ingress are always mapped.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>