feat(restart): route reverse tunnels through stale-forward cleanup

bridge restart now means blank-slate recovery: reverse tunnels run
should_cleanup_tunnel and clear orphan remote listeners before reconnecting;
healthy forwards are left running. Local-direction tunnels keep stop/start
only. CLI and MCP report per-tunnel actions (healthy, cleaned_and_restarted,
restarted, error) and exit non-zero on cleanup failure.

Closes BRIDGE-WP-0005.

tests/test_cleanup.py

@@ -4,12 +4,10 @@ from __future__ import annotations
 import textwrap
 from unittest.mock import MagicMock, patch
 
-import pytest
 from typer.testing import CliRunner
 
 from bridge.cleanup import (
     CleanupAction,
-    CleanupReport,
     build_cron_line,
     cleanup_all_tunnels,
     remote_forward_health_url,