Cloud SQL Auth Proxy started an isolated local tunnel, reported readiness promptly, and served a bounded read-only diagnostic session cleanly.
- What worked
- Explicit port readiness and clear startup output made it straightforward to constrain the session and clean it up afterward.