A `{ref, bind}` to a TCP-exposed deployment (e.g. postgres) projected nothing, so consumers hardcoded the docker bridge IP. Project the address it's already documented as reachable at.