Prove the container listener before wiring private service ports
Prove the actual listener port of every deployed container before wiring a private-service bridge, health probe, or sidecar. Framework defaults, platform-injected variables, and image generations can make a worker listen on a different port than the public web service even when t…