Boundary-layer instability on rotating cones