FWIW - I figured it out - at first I tried "http" and "[http]" for AllowedModules - but that didn't work for some reason, but * does work - the example should be something like this
You can also use .Configure(cfg =>cfg.AllowLocalFilesAccess()) instead. You can see here it does the same.
FWIW - I also think you should change it so the jsreport folder gets created in the project folder instead of in the bin folder - then it would be easy to keep everything in version control as well as in your database.
Thank you for recommendation.I will give it again some thoughts. For now I consider running jsreport studio and web server through jsreport.Local as advanced scenario which requires some additional configuration. Like you have done.