Local dev's Keycloak owns :8080 so tenant-registry shipped on :8090.
Bring the prod + stage manifest ports + the cross-service URL in
customer-portal.toml in line so dev↔prod stays consistent. In Orca
each service has its own port-namespace inside its container, so
this is a cosmetic alignment, not a load-bearing change.
Refs: M5.1
Adds dev/docker-compose.yml + breakpilot-dev Keycloak realm + make dev-up/down/reset/logs targets so a developer can boot the full dependency stack from this repo.
sharang