fix: revert TUNNEL_LOCAL_SSH_PORT to 2223, fix registry, add incident docs

- wizard.sh + connect.conf: TUNNEL_LOCAL_SSH_PORT back to 2223 (Synology SSH port)
- port-registry: renamed x6340 → x4662 (matches QuickConnect ID)
- port-registry: added MR2200ac mesh satellite note for x4662
- deployment checklist: added kit-connect section, post-deployment rules,
  incident log, and complete fleet port registry table
- memory: added fleet-router-inventory.md with full fleet state
- hub README: updated with current status and locations

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

kit-connect/bin/connect-daemon.sh

@@ -46,8 +46,8 @@ load_config() {
     : "${TAILSCALE_HOSTNAME:=${DEVICE_ID}}"
 
     # Tailscale binary location (varies: SRM has /usr/local/bin, GL has /usr/bin)
-    : "${TAILSCALE_BIN:=$(command -v tailscale 2>/dev/null || echo /usr/local/bin/tailscale)}"
-    : "${TAILSCALED_BIN:=$(command -v tailscaled 2>/dev/null || echo /usr/local/bin/tailscaled)}"
+    : "${TAILSCALE_BIN:=$(which tailscale 2>/dev/null || echo /usr/local/bin/tailscale)}"
+    : "${TAILSCALED_BIN:=$(which tailscaled 2>/dev/null || echo /usr/local/bin/tailscaled)}"
 
     # watchdog interval (seconds between forward health checks)
     : "${WATCHDOG_INTERVAL:=60}"

kit-connect/wizard.sh

@@ -44,7 +44,7 @@ ok "Device ID: ${DEVICE_ID}"
 # ── Step 2: Check prerequisites ────────────────────────────────
 step "Checking prerequisites..."
 for cmd in curl ssh ssh-keygen; do
-	command -v "$cmd" >/dev/null 2>&1 || { echo "    ✗ Missing: $cmd"; exit 1; }
+	which "$cmd" >/dev/null 2>&1 || { echo "    ✗ Missing: $cmd"; exit 1; }
 done
 ok "All prerequisites found (curl, ssh)"