docs(deploy): correct host addresses and port-block rules

- LAN address 192.168.1.202 for ubudual5060; port block 10880-10889; :10880 off limits.
- Release process points at the new ops runbook.

deploy/INVENTORY.md

@@ -1,20 +1,25 @@
 # Host
 
-## Overnight Milestone 2 Capture (UAT)
+Port block `10880`–`10889` on ubudual5060 is allocated to this project.
+`:10880` is Ty's local Node/SvelteKit and must never be bound by project deploys.
+The dev-test environment binds `0.0.0.0` so any machine on `192.168.1.0/24` can reach it.
 
-- Host: `ubudual5060` / Tailscale `100.64.0.9`
+## Dev-test environment (M2 current, M3 incoming)
+
+- Host: `ubudual5060` / LAN `192.168.1.202` / Tailscale `100.64.0.9`
 - Container: `slabuploader-m2-overnight` (image `slabuploader-m2:overnight`)
-- Port: **10881** → 80
-- URL: `http://100.64.0.9:10881`
-- Replaces prior overnight container `slabuploader-m1-overnight` (same port).
+- Port: **10881** → 80, bound `0.0.0.0`
+- URLs: `http://192.168.1.202:10881` (LAN) · `http://100.64.0.9:10881` (Tailscale)
+- M3 replaces this container on the same port; remove the M2 container once M3 is healthy.
 
 ## Ty local Node/SvelteKit (do not overwrite)
 
 - Host: `ubudual5060` / `100.64.0.9`
 - Container: `slabuploader-m1`
-- Port: **18080** → 80 (inventory previously listed 10880; do not bind overnight there)
+- Port: **18080** → 80 (inventory previously listed 10880; that port is off limits to project deploys)
 - URL: `http://100.64.0.9:18080`
-- **Never** recreate or remap this container for overnight UAT.
+- **Never** recreate or remap this container for project deploys.
 
-Future overnight Capture deploys use a **separate** container name and an open **108XX** port other than Ty’s local port.
+Future deploys use a **separate** container name and a free port in `10880`–`10889`
+(other than `10880`), bound `0.0.0.0`.
 Do not put a host name in the product spec.