Add project port health checks

[codeforester]

Summary

• Add health.required_ports manifest parsing with explicit state: listening|free, optional name, and default host: 127.0.0.1.
• Report required TCP port health through the existing project check and doctor flows with stable finding ID BASE-H002.
• Document the manifest contract and add parser/diagnostic coverage for valid, invalid, free, and occupied/listening port cases.

Validation

• PYTHONPATH=lib/python:cli/python /Users/rameshhp/.base.d/base/.venv/bin/python -m unittest cli.python.base_setup.tests.test_manifest cli.python.base_setup.tests.test_diagnostics
• PYTHONPATH=lib/python:cli/python /Users/rameshhp/.base.d/base/.venv/bin/python -m pylint --rcfile=.pylintrc cli/python/base_setup/manifest.py cli/python/base_setup/health.py cli/python/base_setup/engine.py cli/python/base_setup/tests/test_manifest.py cli/python/base_setup/tests/test_diagnostics.py
• git diff --check
• env -u BASE_HOME HOME=/private/tmp/base-review-home BASE_TEST_PYTHON=/Users/rameshhp/.base.d/base/.venv/bin/python bin/base-test

Note: the local loopback socket probe test skips in sandboxed environments that reject TCP bind with PermissionError; it runs normally where loopback bind is permitted.

Closes #394