feat(core): reserved-port and API-key guardrails in the default system prompt (#24)

Co-authored-by: Alice <alice@prismshadow.com>
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

packages/web/vite.config.ts

@@ -14,6 +14,8 @@ import { defineConfig } from "vite";
 export default defineConfig({
   plugins: [react(), tailwindcss()],
   server: {
+    // Fixed PenguinHarness dev port (stands alone — only the main server default is
+    // shared, as DEFAULT_SERVER_PORT in core; vite configs cannot import core TS).
     port: 7365,
     proxy: {
       "/api": {