Expose only the console; node binds 8081 guest-internal

The console routes to nodes (rendezvous), so it is the single public
port: server -> :8081 (no host forward), console -> :8080, 8090
forward dropped. Verified: node unreachable from host, routed
workstream creation lands on turnstone-vm-main at 127.0.0.1:8081,
route/command proxy works, cluster view tracks the workstream.

scripts/expose.sh

@@ -8,14 +8,14 @@
 # Prints a stable tailcat address (saved key at
 # ~/.config/tailcat/keys/default.private.json). On the client machine:
 #
-#   tailcat forward <tc-address> 8080:8080 8090:8090 2222:2222
+#   tailcat forward <tc-address> 8080:8080 2222:2222
 #
 # then browse http://localhost:8080 and ssh -p 2222 as usual.
 set -euo pipefail
 cd "$(dirname "$0")/.."
 
 TC="${TAILCAT_BIN:-$HOME/.local/bin/tailcat}"
-PORTS="${TAILCAT_PORTS:-8080,8090,2222}"
+PORTS="${TAILCAT_PORTS:-8080,2222}"
 
 if ! command -v "$TC" >/dev/null 2>&1; then
   echo "tailcat not found at $TC" >&2