Expose only the console; node binds 8081 guest-internal

The console routes to nodes (rendezvous), so it is the single public
port: server -> :8081 (no host forward), console -> :8080, 8090
forward dropped. Verified: node unreachable from host, routed
workstream creation lands on turnstone-vm-main at 127.0.0.1:8081,
route/command proxy works, cluster view tracks the workstream.

scripts/expose.sh

@@ -8,14 +8,14 @@
 # Prints a stable tailcat address (saved key at
 # ~/.config/tailcat/keys/default.private.json). On the client machine:
 #
-#   tailcat forward <tc-address> 8080:8080 8090:8090 2222:2222
+#   tailcat forward <tc-address> 8080:8080 2222:2222
 #
 # then browse http://localhost:8080 and ssh -p 2222 as usual.
 set -euo pipefail
 cd "$(dirname "$0")/.."
 
 TC="${TAILCAT_BIN:-$HOME/.local/bin/tailcat}"
-PORTS="${TAILCAT_PORTS:-8080,8090,2222}"
+PORTS="${TAILCAT_PORTS:-8080,2222}"
 
 if ! command -v "$TC" >/dev/null 2>&1; then
   echo "tailcat not found at $TC" >&2

scripts/run.sh

@@ -1,9 +1,9 @@
 #!/usr/bin/env bash
 # Boot the turnstone VM (foreground; QEMU: ctrl-a x to quit).
 #
-# Web UI:   http://localhost:8080
-# Web UI:    http://localhost:8080
-# Console:   http://localhost:8090
+# Console (proxy to the node; chat UI + admin): http://localhost:8080
+# (The node itself binds :8081 guest-internal — the console routes to
+#  it; no direct host forward.)
 # Ops SSH:   ssh -i configs/ssh/id_ed25519 -p 2222 marvin@localhost
 set -euo pipefail
 cd "$(dirname "$0")/.."
@@ -14,7 +14,6 @@ exec boco boot marvin-turnstone \
   --memory "${VM_MEMORY:-4096M}" \
   --mount-mode direct \
   --forward "tcp:0.0.0.0:8080-:8080" \
-  --forward "tcp:0.0.0.0:8090-:8090" \
   --forward "tcp:0.0.0.0:2222-:22" \
   --mount "$PWD/configs/turnstone:/home/marvin/.config/turnstone" \
   --mount "$PWD/data:/var/lib/turnstone" \