Reuse exact-owned Hermes forwards during onboarding and resume (PR #11427)

[prekshivyas]

Parent epic: #11573

Delivered outcome

Repeated Hermes onboarding and resume retain verified dashboard and API forwards on their registered ports. Missing forwards are restored; sibling reservations, foreign listeners, changed identity, and unsafe ownership fail closed.

Pull request

• Merged PR: fix(onboard): reuse Hermes dashboard and API forwards #11427
• Merge commit: b40cc623d

Relationship to the Portable candidate

Candidate commit 30ef9ec7a independently addressed the occupied-forward failure found in the seat cycle. It is not an ancestor of current main; #11427 delivered the reviewed, broader implementation and is the source of truth.

Status: delivered to main by #11427.

[prekshivyas]

Delivered to main by #11427. The independent candidate commit is retained in the issue for investigation history but is superseded for upstream delivery.