config: investigate adding localhost (or `$(hostname)`) in `APP_ALLOWED_HOSTS`

[slint]

In legacy production we had this setting with a comment:

APP_ALLOWED_HOSTS = [
    'localhost',  # allows sending emails from Celery tasks
    ...
]

This might explain possibly why email sending fails sometimes? Has to be cross-checked.