fix(deploy): publish device plane loopback health

device-plane/deployment/device-plane-foundation-network-publication-v1.json

@@ -0,0 +1,24 @@
+{
+  "schemaVersion": "nodedc.device-plane.foundation-network-publication.v1",
+  "mode": "failed-foundation-network-publication-correction",
+  "failedRecoveryPatchId": "device-plane-foundation-recovery-20260725-002",
+  "failedRecoveryArtifactSha256": "9183cc385142584bfd12510bb0a3e6b833b2fd26607436f2486a564c628ea1bf",
+  "failedRecoveryBackupId": "device-plane-device-plane-foundation-recovery-20260725-002-20260725-232447",
+  "sourceAction": "publish-network-corrected-foundation-source",
+  "runtimeAction": "recreate-stateless-services-no-build",
+  "selectedServices": [
+    "device-control-core",
+    "device-gateway"
+  ],
+  "preservedServices": [
+    "device-postgres"
+  ],
+  "privateNetwork": "nodedc-device-plane-private",
+  "controlNetwork": "nodedc-device-plane-control",
+  "publishedLoopbackPorts": [
+    "127.0.0.1:18120:18120",
+    "127.0.0.1:18121:18121"
+  ],
+  "databaseVolume": "nodedc-device-plane-postgres-data",
+  "rollback": "restore-partial-source-and-internal-only-stateless-runtime"
+}

device-plane/docker-compose.device-plane.yml

@@ -55,6 +55,7 @@ services:
       - "127.0.0.1:18120:18120"
     networks:
       - device-plane-private
+      - device-plane-control
     depends_on:
       device-postgres:
         condition: service_healthy
@@ -93,6 +94,7 @@ services:
       - "127.0.0.1:18121:18121"
     networks:
       - device-plane-private
+      - device-plane-control
     security_opt:
       - no-new-privileges:true
     cap_drop:
@@ -112,6 +114,12 @@ networks:
   device-plane-private:
     name: nodedc-device-plane-private
     internal: true
+  device-plane-control:
+    name: nodedc-device-plane-control
+    driver: bridge
+    internal: false
+    driver_opts:
+      com.docker.network.bridge.enable_ip_masquerade: "false"
 
 volumes:
   device-plane-postgres-data: