Atomically update forwarded HTTP ports on an instance

Atomically add and remove forwarded HTTP ports on a running instance in a single transaction. Body: {"add_ports": [8080], "remove_ports": [3000]}. Adds are deduplicated and removing ports that are not currently forwarded is a no-op. Each forwarded port is reachable at https://<uuid>-<port>.thundercompute.net.