Expose only the console; node binds 8081 guest-internal

The console routes to nodes (rendezvous), so it is the single public
port: server -> :8081 (no host forward), console -> :8080, 8090
forward dropped. Verified: node unreachable from host, routed
workstream creation lands on turnstone-vm-main at 127.0.0.1:8081,
route/command proxy works, cluster view tracks the workstream.

README.md

@@ -49,11 +49,10 @@ image, then packs it as `boco` qcow2 into the boco registry.
 scripts/run.sh
 ```
 
-- Web UI: <http://localhost:8080> (login `marvin` / `marvin-turnstone`
-  unless `ADMIN_PASSWORD` was overridden — change it)
-- Console (admin panel + usage/verdicts/audit/settings): port 8090,
-  same login — shares the DB with the server, so workstreams, tools,
-  judges, policies, and settings are managed dynamically
+- Console (proxy to the node; chat UI + admin panel): :8080 — login
+  `marvin` / `marvin-turnstone` unless `ADMIN_PASSWORD` was overridden.
+  The node binds :8081 guest-internal only (no host forward); the
+  console routes to it, so all chat/admin goes through one port.
 - Ops SSH: `ssh -i configs/ssh/id_ed25519 -p 2222 marvin@localhost`
 - QEMU runs foreground; quit with `ctrl-a x`