Port intelligence for live deploys

Oder Open Ports

Track what is live, what UFW exposes, and which deploy-range ports are still safe to reserve.