Expose Fleet via port-forward on port 8585 instead of fleet.localhost

- Add make port-forward target (default: https://0.0.0.0:8585)
- FLEET_PORT variable for custom port
- Update README with port-forward instructions

Co-authored-by: Cursor <cursoragent@cursor.com>

Makefile

@@ -4,8 +4,9 @@
 RELEASE_NAME ?= fleetdm-stack
 NAMESPACE ?= fleetdm
 CLUSTER_TYPE ?= kind
+FLEET_PORT ?= 8585
 
-.PHONY: cluster install uninstall deps verify clean
+.PHONY: cluster install uninstall deps verify clean port-forward
 
 cluster:
 	@echo "Creating local Kubernetes cluster ($(CLUSTER_TYPE))..."
@@ -48,6 +49,11 @@ uninstall:
 	kubectl delete namespace $(NAMESPACE) --timeout=120s || true
 	@echo "Uninstall complete."
 
+port-forward:
+	@echo "Forwarding Fleet UI to https://0.0.0.0:$(FLEET_PORT) ..."
+	@echo "Press Ctrl+C to stop."
+	kubectl port-forward --address 0.0.0.0 svc/fleetdm-stack-service $(FLEET_PORT):8080 -n $(NAMESPACE)
+
 verify:
 	@echo "Verifying FleetDM, MySQL, and Redis..."
 	@echo ""
@@ -58,15 +64,11 @@ verify:
 	kubectl get svc -n $(NAMESPACE)
 	@echo ""
 	@echo "=== Ingress ==="
-	kubectl get ingress -n $(NAMESPACE)
+	kubectl get ingress -n $(NAMESPACE) 2>/dev/null || echo "  (no ingress)"
 	@echo ""
 	@echo "Access Fleet UI:"
-ifeq ($(CLUSTER_TYPE),kind)
-	@echo "  Add to /etc/hosts: 127.0.0.1 fleet.localhost"
-	@echo "  Then: curl -H 'Host: fleet.localhost' http://localhost"
-else
-	@echo "  minikube tunnel (if needed) then: http://fleet.localhost (add to /etc/hosts)"
-endif
+	@echo "  make port-forward    # then open https://localhost:$(FLEET_PORT)"
+	@echo "  (or change port: make port-forward FLEET_PORT=9090)"
 
 clean: uninstall
 ifeq ($(CLUSTER_TYPE),kind)