Say plainly where the raised package registry runs, and why an action outside a container still runs

internal/bootstrap/phase_packages.go

@@ -148,9 +148,9 @@ func seedGiteaDatabase(ctx context.Context, run Runner, timeout time.Duration, p
 	return nil
 }
 
-// raiseGiteaServer starts the gitea server container against the foundation store. It joins the
-// store's network namespace so `127.0.0.1:5432` reaches postgres, and publishes its own port on the
-// machine so the builder and this installer can reach it. Started if absent, left alone if present.
+// raiseGiteaServer starts the gitea server container against the foundation store. It runs on the
+// machine's own network, so `127.0.0.1` reaches the store where it publishes its port, and it binds
+// its own port there for the builder and this installer. Started if absent, left alone if present.
 func raiseGiteaServer(ctx context.Context, run Runner, timeout time.Duration, dbPassword string,
 	ports FoundationPorts, say func(string)) error {
 	asking, cancel := context.WithTimeout(ctx, timeout)