fixestailscale/corp#27506
The bootstrapDNS code is unable to resolve log and derp endpoints when if the forward
dns is a local loopback addr while the tunnel is running.
Sandboxed macos requires that we bind to loopback addresses explicitly. tailscaled on mac must not.
Signed-off-by: Jonathan Nobels <jonathan@tailscale.com>