fix(manifests): tenant-registry port 8080 → 8090 (match dev)

Local dev's Keycloak owns :8080 so tenant-registry shipped on :8090.
Bring the prod + stage manifest ports + the cross-service URL in
customer-portal.toml in line so dev↔prod stays consistent. In Orca
each service has its own port-namespace inside its container, so
this is a cosmetic alignment, not a load-bearing change.

Refs: M5.1

manifests/vm-control/tenant-registry.toml

@@ -4,7 +4,7 @@
 [[service]]
 name = "tenant-registry"
 image = "registry.breakpilot.com/tenant-registry:placeholder"
-port = 8080
+port = 8090
 
 [service.placement]
 node = "vm-control"