Local dev's Keycloak owns :8080 so tenant-registry shipped on :8090.
Bring the prod + stage manifest ports + the cross-service URL in
customer-portal.toml in line so dev↔prod stays consistent. In Orca
each service has its own port-namespace inside its container, so
this is a cosmetic alignment, not a load-bearing change.
Refs: M5.1
sharang