Fix Zitadel health check and add ss command to allowed commands

- Add 'ss' to ALLOWED_COMMANDS for port checking
- Fix Zitadel health check URL to include full address

src/core/bootstrap/bootstrap_utils.rs

@@ -226,7 +226,7 @@ pub fn zitadel_health_check() -> bool {
                 "2",
                 "-m",
                 "3",
-                "/debug/healthz",
+                "http://localhost:8300/debug/healthz",
             ])
         })
         .and_then(|c| c.execute());

src/security/command_guard.rs

@@ -51,6 +51,7 @@ static ALLOWED_COMMANDS: LazyLock<HashSet<&'static str>> = LazyLock::new(|| {
         "true",
         "rm",
         "find",
+        "ss",
         // Test/dev utilities
         "cargo",
         "redis-server",