Same monitor setup as T1: network_mode host, host FS bind-mounted at /host, env vars sourced from .env.