fix(web): expose loopback policy safely

scripts/client-bundle-purity.spec.ts

@@ -53,6 +53,7 @@ describe('client bundle purity gate', () => {
     expect(resolveId('@deepseek-ai/dsh-host-apiproxy/api')).toBeNull()
     expect(resolveId('@deepseek-ai/dsh-session/surface')).toBeNull()
     expect(resolveId('@deepseek-ai/dsh-brand')).toBeNull()
+    expect(resolveId('@deepseek-ai/dsh-client-connection/loopback-hostname')).toBeNull()
   })
 
   it('throws on any other @deepseek-ai leak', () => {