Keycloak occupies :8080 in the dev stack; tenant-registry now defaults
to :8090. Update the portal's fallback base URL + .env.example +
the test that pins the URL it constructs.
Prod is unaffected — the Orca manifest sets TENANT_REGISTRY_URL via
service discovery (cross-VM), not a localhost port.
Refs: M5.1
Next.js 16 + Auth.js v5 skeleton: host→slug middleware, tenant-context layout, OIDC sign-in flow against breakpilot-dev realm. 100% coverage on src/lib. Bumps next to 16.2.6 to clear trivy CVEs in 15.0.3.
sharang