Fix evidence ACL to match /evidences path exactly

The payload inspection ACL matched "GET /evidence" which was too broad,
catching any path starting with /evidence (e.g. /evidence-foo). Changed
to match "GET /evidences" to preserve the exact path from the old nginx
`location /evidences/` config.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: h4x3rotab

custom-domain/dstack-ingress/scripts/entrypoint.sh

@@ -120,8 +120,8 @@ EOF
     # Route /evidences requests to local evidence HTTP server
     tcp-request inspect-delay 5s
     tcp-request content accept if WAIT_END
-    acl is_evidence payload(0,0) -m beg "GET /evidence"
-    acl is_evidence payload(0,0) -m beg "HEAD /evidence"
+    acl is_evidence payload(0,0) -m beg "GET /evidences"
+    acl is_evidence payload(0,0) -m beg "HEAD /evidences"
     use_backend be_evidence if is_evidence
 EVIDENCE_BLOCK
     fi
@@ -175,8 +175,8 @@ EOF
     # Route /evidences requests to local evidence HTTP server
     tcp-request inspect-delay 5s
     tcp-request content accept if WAIT_END
-    acl is_evidence payload(0,0) -m beg "GET /evidence"
-    acl is_evidence payload(0,0) -m beg "HEAD /evidence"
+    acl is_evidence payload(0,0) -m beg "GET /evidences"
+    acl is_evidence payload(0,0) -m beg "HEAD /evidences"
     use_backend be_evidence if is_evidence
 EVIDENCE_BLOCK
     fi