Nexus needs to be able to resolve external hosts when configuring an IdP if grabbing metadata via URL.

[luqmana]

This regressed probably when services got moved to their own zones instead of just running directly in the global zone 😬. We've just been using the inline base64-encoded variant in dogfood and so hadn't noticed.

cc #2122