Name harbour listeners from evidenced container identity

[Brams-s]

Summary

• Name listeners from unique, TCP-published container evidence while keeping protocol, launch origin, and historical display provenance distinct. Ambiguous and unavailable identities remain explicit rather than guessed.
• Show allowlisted, locally bundled marks for evidenced services; use neutral emblems when a brand is unsupported. No runtime asset requests or managed-agent/task/chat changes.
• Update the generated playground and asset notice, with Python and browser selector coverage for ambiguous ports and false-logo cases.

Validation

• uv run --no-project --with pytest pytest — 99 passed.
• python3 tools/gen_playground.py and uv run --no-project --with playwright python tools/worldcheck/play.py — all pass; no console errors.
• git diff --check — clean.

Draft caveat

The longer tools/worldcheck/run.py check did not complete locally on this host after its scripted scene (600-second command timeout). A pre-existing upstream sandbox/poll race was reproduced separately; the harness is unchanged in this PR. CI will provide the branch result before this is marked ready.