Expose only the console; node binds 8081 guest-internal

The console routes to nodes (rendezvous), so it is the single public
port: server -> :8081 (no host forward), console -> :8080, 8090
forward dropped. Verified: node unreachable from host, routed
workstream creation lands on turnstone-vm-main at 127.0.0.1:8081,
route/command proxy works, cluster view tracks the workstream.

start-turnstone.sh

@@ -53,8 +53,8 @@ setpriv --reuid=marvin --regid=marvin --init-groups \
 # marvin — PID 1 stays the server, so if the server dies the VM halts.
 # Shares the same config.toml/database as the server (WAL multi-writer).
 setpriv --reuid=marvin --regid=marvin --init-groups \
-  /usr/local/bin/turnstone-console --host 0.0.0.0 --port 8090 &
-echo "start-turnstone: console starting on :8090"
+  /usr/local/bin/turnstone-console --host 0.0.0.0 --port 8080 &
+echo "start-turnstone: console starting on :8080"
 
 # NOTE: turnstone reads $HOME/.config/turnstone/config.toml as marvin.
 #
@@ -67,6 +67,6 @@ echo "start-turnstone: console starting on :8090"
 #     lands in the SSRF guard's never-allowed lane, which got the node
 #     refused outright.
 export TURNSTONE_NODE_ID="${TURNSTONE_NODE_ID:-turnstone-vm-main}"
-export TURNSTONE_ADVERTISE_URL="${TURNSTONE_ADVERTISE_URL:-http://127.0.0.1:8080}"
+export TURNSTONE_ADVERTISE_URL="${TURNSTONE_ADVERTISE_URL:-http://127.0.0.1:8081}"
 exec setpriv --reuid=marvin --regid=marvin --init-groups \
-  /usr/local/bin/turnstone-server --host 0.0.0.0 --port 8080
+  /usr/local/bin/turnstone-server --host 0.0.0.0 --port 8081