A discussion that started with #114628 (comment) revealed a lot of confusion over --device-vmservice-port, --host-vmservice-port, and --dds-port. The conclusion was:

• Application runs on device, it starts up a VM Service instance. This instance will broadcast on a port + auth code combo.
• (Optional) If Host/Device are different machines, we forward the device port to a selected host port.
• (Optional) If dds is enabled, dds connects to the selected host port, then broadcasts on the dds port

However, we should:

1. verify this is how things currently work
2. refactor to clean up, remove redundancy, and add validations
3. document how it all works, in the code, the CLI help text and a standalone document.