Building a devcontainer for Topaz: workspace mounts, DNS wildcards, and why /etc/resolv.conf always wins

A technical account of building a VS Code Dev Container for the Topaz Azure emulator, covering Docker Compose workspace mount pitfalls, certificate distribution without bind mounts, and why dnsmasq belongs in its own sidecar service.