Share the Cesium ports between the app and conformance renderers

The frame, draw, camera, query and capture ports move out of the
conformance scene renderer into src/render/cesium/ports.js, unchanged.
The app's transitional renderer, now src/render/cesium/appRenderer.js,
builds the same ports over the full viewer; it still leaves out globe,
whenSettled and setTime, which would misreport photoreal tiles and stop
the app clock.

Disposing the ports now settles a pending renderOnce and detaches the
draw sets, so a model that loads after destroy is destroyed rather than
added to a destroyed collection. A viewer whose ports fail to build is
destroyed with its credits.

Checked in a browser: the app boots with one credits element, and all
eleven conformance scenes match their references exactly.

scripts/format-scope.json

@@ -671,7 +671,7 @@
   "src/services/application.js",
   "src/services/requests.js",
   "src/app/scene.js",
-  "src/app/renderer.test.mjs",
+  "src/render/cesium/appRenderer.test.mjs",
   "src/render/noCesiumOutsideRender.test.mjs",
   "src/render/cesiumAllowList.json",
   "src/geo/geo.test.mjs",

scripts/package-boundaries.json

@@ -2421,7 +2421,8 @@
       "src/app/layers/traffic.js",
       "src/app/operations.js",
       "src/app/scene.js",
-      "src/app/renderer.js",
+      "src/render/cesium/appRenderer.js",
+      "src/render/cesium/ports.js",
       "src/render/contract/index.js",
       "src/sources/sourceSlot.js",
       "src/app/sources.js",