Reduce controller polling and bound chat admission waits

dev/test_recovery.py

@@ -1,4 +1,5 @@
 import io
+import re
 import subprocess
 import tarfile
 import tempfile
@@ -94,7 +95,13 @@ class RecoveryScriptTests(unittest.TestCase):
         gateway = (ROOT / "platform/docker/wireguard-gateway/entrypoint.sh").read_text(
             encoding="utf-8"
         )
-        self.assertNotIn('network_mode: "service:wireguard-gateway"', compose)
+        # WebRTC deliberately shares the gateway for private ICE candidates.
+        # Dashboard and Portainer must retain their independent namespaces.
+        for service in ("llama-dashboard", "portainer"):
+            block = re.search(
+                rf"(?ms)^  {service}:\n(.*?)(?=^  [a-zA-Z0-9_-]+:|\Z)", compose)
+            self.assertIsNotNone(block)
+            self.assertNotIn('network_mode: "service:wireguard-gateway"', block.group(1))
         self.assertNotIn('"8099:8099"', compose)
         self.assertNotIn('"9443:9443"', compose)
         self.assertIn('start_proxy 8099 llama-dashboard:8099', gateway)