Fix relay scan compile drift and tighten -Recon test filter.

Align relay_scan with ScanPorts/BuildRecommendations signatures and run deploy-recon API tests with an exact -run regex so -Recon does not match unrelated reconnect tests.

scripts/test-suite.ps1

@@ -267,8 +267,9 @@ if ($SubnetRecon) {
 if ($Recon) {
     Invoke-Phase "Deploy recon (engine + API + UI)" {
         Push-Location (Join-Path $Root "server")
-        go test ./internal/recon/... -count=1
-        go test ./internal/api/... -run "Recon|DeployKit|FleetSpread" -count=1
+        Invoke-GoTest "./internal/recon/..."
+        go test ./internal/api/... -run "^(TestReconScan|TestGetDeployKit|TestResolveRecon)" -count=1
+        if ($LASTEXITCODE -and $LASTEXITCODE -ne 0) { throw "api deploy-recon tests failed (exit $LASTEXITCODE)" }
         Pop-Location
         Push-Location (Join-Path $Root "server\web")
         if (-not (Test-Path "node_modules")) { npm install --silent }