fix(dcrouter): sync allowed tunnel edges when merged routes change

ts/classes.dcrouter.ts

@@ -478,11 +478,15 @@ export class DcRouter {
                   }
                 : undefined,
               this.referenceResolver,
-              // Sync merged routes to RemoteIngressManager whenever routes change
+              // Sync merged routes to RemoteIngressManager whenever routes change,
+              // then push updated derived ports to the Rust hub binary
               (routes) => {
                 if (this.remoteIngressManager) {
                   this.remoteIngressManager.setRoutes(routes as any[]);
                 }
+                if (this.tunnelManager) {
+                  this.tunnelManager.syncAllowedEdges();
+                }
               },
             );
             this.apiTokenManager = new ApiTokenManager();