Expose only the console; node binds 8081 guest-internal

The console routes to nodes (rendezvous), so it is the single public
port: server -> :8081 (no host forward), console -> :8080, 8090
forward dropped. Verified: node unreachable from host, routed
workstream creation lands on turnstone-vm-main at 127.0.0.1:8081,
route/command proxy works, cluster view tracks the workstream.

scripts/run.sh

@@ -1,9 +1,9 @@
 #!/usr/bin/env bash
 # Boot the turnstone VM (foreground; QEMU: ctrl-a x to quit).
 #
-# Web UI:   http://localhost:8080
-# Web UI:    http://localhost:8080
-# Console:   http://localhost:8090
+# Console (proxy to the node; chat UI + admin): http://localhost:8080
+# (The node itself binds :8081 guest-internal — the console routes to
+#  it; no direct host forward.)
 # Ops SSH:   ssh -i configs/ssh/id_ed25519 -p 2222 marvin@localhost
 set -euo pipefail
 cd "$(dirname "$0")/.."
@@ -14,7 +14,6 @@ exec boco boot marvin-turnstone \
   --memory "${VM_MEMORY:-4096M}" \
   --mount-mode direct \
   --forward "tcp:0.0.0.0:8080-:8080" \
-  --forward "tcp:0.0.0.0:8090-:8090" \
   --forward "tcp:0.0.0.0:2222-:22" \
   --mount "$PWD/configs/turnstone:/home/marvin/.config/turnstone" \
   --mount "$PWD/data:/var/lib/turnstone" \