Function is_loopback_host 

pub fn is_loopback_host(host: &str) -> bool

Returns true if host denotes a loopback-only bind address.

Used by the startup guard: binding to loopback means the API is not reachable from other pods/hosts, so weaker auth is tolerable for local development.