fix(manifests): tenant-registry port 8080 → 8090 (match dev)

Local dev's Keycloak owns :8080 so tenant-registry shipped on :8090.
Bring the prod + stage manifest ports + the cross-service URL in
customer-portal.toml in line so dev↔prod stays consistent. In Orca
each service has its own port-namespace inside its container, so
this is a cosmetic alignment, not a load-bearing change.

Refs: M5.1

manifests/stage/tenant-registry.toml

@@ -5,7 +5,7 @@
 [[service]]
 name = "tenant-registry"
 image = "registry.breakpilot.com/tenant-registry:env-stage"
-port = 8080
+port = 8090
 depends_on = ["pg-app-stage"]
 
 [service.placement]

manifests/vm-control/customer-portal.toml

@@ -17,4 +17,4 @@ cpu = 1.0
 
 [service.env]
 KEYCLOAK_ISSUER = "https://auth.breakpilot.com/realms/breakpilot-prod"
-TENANT_REGISTRY_URL = "http://tenant-registry:8080"
+TENANT_REGISTRY_URL = "http://tenant-registry:8090"

manifests/vm-control/tenant-registry.toml

@@ -4,7 +4,7 @@
 [[service]]
 name = "tenant-registry"
 image = "registry.breakpilot.com/tenant-registry:placeholder"
-port = 8080
+port = 8090
 
 [service.placement]
 node = "vm-control"