fix(asterisk): hostAlias downloads.asterisk.org so sounds actually download

CoreDNS wildcard for iamworkin.lan catches unresolved names and returns
the Traefik VIP (10.0.56.200), so downloads.asterisk.org from inside a
pod returns 404 from Traefik rather than the real Sangoma mirror. Pin
the real IP (165.22.184.19 = oss-downloads.sangoma.com) via hostAliases
so curl reaches the actual server.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

apps/asterisk/deployment.yaml

@@ -23,6 +23,15 @@ spec:
       dnsPolicy: ClusterFirstWithHostNet
       securityContext:
         fsGroup: 0
+      # CoreDNS in this cluster has an iamworkin.lan wildcard that catches
+      # any unresolved name and returns 10.0.56.200 (Traefik VIP), which
+      # means downloads.asterisk.org inside the pod resolves to Traefik and
+      # returns 404. Pin the real address so the init container can fetch
+      # the sounds tarball.
+      hostAliases:
+        - ip: 165.22.184.19
+          hostnames:
+            - downloads.asterisk.org
       initContainers:
         - name: install-sounds
           # Downloads Asterisk core sounds (en, ulaw) into the sounds emptyDir