fix(builder): listen on $HOST

The builder by default binds itself to 0.0.0.0. When we are in a
public cloud which exposes all ports by default, this means that the
builder will accept all incoming connections from anyone. This is not
intentional. The builder should only accept connections internal to
the cluster, and the router will expose the builder outside the
cluster.