Follow-ups: dev-reload port wait & startup audit (tests, log rotation, portability)

[mchzimm]

This issue tracks follow-ups and TODOs from PR #30 (dev: wait for port free in dev-reload; http: append startup audit line when writing pid).

Tasks:

• Add an integration test that verifies the server writes the START audit line on startup (requires a test harness to spawn the server).
• Consider a 'fail-hard' mode for dev-reload if the port remains busy (configurable via env var).
• Implement log rotation/rotation policy for project and user audit logs to avoid unbounded growth.
• Improve portability on Windows (lsof absence) — consider a Node-based probe helper or platform-specific netstat alternatives.
• Surface last-startup audit in component-status so the UI can show "Last startup at (pid)".

Notes:

• Documentation added: docs/operations/dev-reload-port-audit.md
• PR: dev: wait for port free in dev-reload; http: append startup audit line when writing pid #30