feat(web,host/windows): move the web console off :3000 to :47992

Port 3000 collides with half the dev-server ecosystem; 47992 sits next
to the mgmt API (47990) in the punktfunk port family. Updates the run
scripts, systemd/scheduled-task units, Dockerfile, Windows firewall
rule + installer, packaging, and every doc that referenced :3000.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

docs-site/content/docs/bazzite.md

@@ -129,7 +129,7 @@ Desktop; it follows whichever the box is in.
 ```sh
 systemctl --user enable --now punktfunk-host
 # Web console (pairing + status) — enable it and read the auto-generated login password,
-# then open http://<host-ip>:3000:
+# then open http://<host-ip>:47992:
 systemctl --user enable --now punktfunk-web
 journalctl --user -u punktfunk-web-init | sed -n 's/.*password generated: //p'
 ```

docs-site/content/docs/fedora-kde.md

@@ -114,7 +114,7 @@ mDNS. It requires **PIN pairing** by default (secure on a LAN); pair once from y
 ### Web console
 
 The console (status, paired devices, arm pairing) ships as `punktfunk-web` — enable it, then open
-`http://<host-ip>:3000`:
+`http://<host-ip>:47992`:
 
 ```sh
 systemctl --user enable --now punktfunk-web

docs-site/content/docs/install.md

@@ -73,7 +73,7 @@ fallback without one. More detail — including the CLI `punktfunk-host service
    Bare `serve` is the secure native-only default (native `punktfunk/1` + the web console). On a
    trusted LAN, add `--gamestream` to also serve stock [Moonlight](/docs/moonlight) clients.
 
-3. Enable the web console and read its login password, then open `http://<host-ip>:3000`:
+3. Enable the web console and read its login password, then open `http://<host-ip>:47992`:
 
    ```sh
    systemctl --user enable --now punktfunk-web

docs-site/content/docs/steamos-host.md

@@ -83,7 +83,7 @@ When it finishes it prints the web-console URL and how to pair.
 
 By default the host **requires PIN pairing** (secure). Two ways to pair:
 
-- **Web console** (printed at the end of step 2): open `http://<device-ip>:3000`, log in with the
+- **Web console** (printed at the end of step 2): open `http://<device-ip>:47992`, log in with the
   generated password (in `~/.config/punktfunk/web.env`), go to **Devices → arm pairing**, and enter
   the PIN on your client.
 - **From the client directly**: pick this host (it advertises over mDNS as `_punktfunk._udp`) and

docs-site/content/docs/ubuntu-gnome.md

@@ -103,7 +103,7 @@ The console (status, paired devices, arm pairing) ships as `punktfunk-web`:
 
 ```sh
 systemctl --user enable --now punktfunk-web
-# read the auto-generated login password, then open http://<host-ip>:3000
+# read the auto-generated login password, then open http://<host-ip>:47992
 journalctl --user -u punktfunk-web-init | sed -n 's/.*password generated: //p'
 ```
 

docs-site/content/docs/ubuntu-kde.md

@@ -76,7 +76,7 @@ your [client](/docs/clients).
 
 ```sh
 systemctl --user enable --now punktfunk-web
-# read the auto-generated login password, then open http://<host-ip>:3000
+# read the auto-generated login password, then open http://<host-ip>:47992
 journalctl --user -u punktfunk-web-init | sed -n 's/.*password generated: //p'
 ```
 

docs-site/content/docs/windows-host.md

@@ -52,7 +52,7 @@ Packaging internals live in
 
 The installer also sets up the **web management console** (status, paired devices, the PIN pairing
 flow): it bundles the console plus its own runtime and runs it as the **`PunktfunkWeb`** task on
-**`http://<this-PC>:3000`**, starting at boot.
+**`http://<this-PC>:47992`**, starting at boot.
 
 #### Console login password