Keycloak occupies :8080 in the dev stack; tenant-registry now defaults
to :8090. Update the portal's fallback base URL + .env.example +
the test that pins the URL it constructs.
Prod is unaffected — the Orca manifest sets TENANT_REGISTRY_URL via
service discovery (cross-VM), not a localhost port.
Refs: M5.1
sharang