Okay, I'll try to look at this a bit later. You're right, it does seem like that first run of gradlew goes out and fetches newest gradle (I think) -- which means you ARE getting out the net via the container itself.
I reran the command too and having no issues with Cypress and you said you can get to it manually too outside the container, so doubtful that is an issue now.
For clarity's sake, let's look at the
datahub_network
as well:
sudo docker network inspect datahub_network