chore(docs): redact remaining localhost:PORT URLs from README (inst_084 hygiene)

Follow-up to c85f310f. The pre-commit hook's attack-surface check (inst_084)
catches "port XXXX" phrasing but not `localhost:PORT` URL form; a broader
grep surfaced 5 remaining exposures after the license commit.

Redactions:
- L432 (Dashboard prose): localhost:9000 → localhost:<hub-port>
- L469, L476, L477 (shell commands): localhost:9000 → localhost:${HUB_PORT}
- L473 (shell command, different service): localhost:7000 → localhost:${FAMILY_PORT}

Shell commands use env-var form (${HUB_PORT}) to avoid shell-redirection
interpretation if copy-pasted; prose reference uses <hub-port> for human
clarity.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

README.md

@@ -429,7 +429,7 @@ The hub provides two primary services:
 - Indexes 1,259+ documents across all projects
 - Full-text search across ecosystem
 - Real-time index updates
-- Dashboard: `http://localhost:9000/dashboards/documentation-hub.html`
+- Dashboard: `http://localhost:<hub-port>/dashboards/documentation-hub.html`
 
 **2. Governance Analytics**
 - Analyzes 138+ rules across projects
@@ -466,15 +466,15 @@ Centralized port allocation prevents conflicts:
 
 # 2. Start the platform-admin hub
 sudo systemctl start platform-admin
-curl http://localhost:9000/health
+curl http://localhost:${HUB_PORT}/health
 
 # 3. Start your project (e.g., family-history)
 sudo systemctl start family-history-dev
-curl http://localhost:7000/health
+curl http://localhost:${FAMILY_PORT}/health
 
 # 4. Access dashboards
-open http://localhost:9000/dashboards/documentation-hub.html
-open http://localhost:9000/dashboards/governance-analytics.html
+open http://localhost:${HUB_PORT}/dashboards/documentation-hub.html
+open http://localhost:${HUB_PORT}/dashboards/governance-analytics.html
 ```
 
 **Note**: Platform-admin hub is optional. Each project functions independently with full governance enforcement.