a3a1783b6c
Local dev's Keycloak owns :8080 so tenant-registry shipped on :8090. Bring the prod + stage manifest ports + the cross-service URL in customer-portal.toml in line so dev↔prod stays consistent. In Orca each service has its own port-namespace inside its container, so this is a cosmetic alignment, not a load-bearing change. Refs: M5.1