tunnels: optional remote_host forward destination (default 127.0.0.1)

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

src/bridge/models.py

@@ -51,6 +51,10 @@ class TunnelConfig:
     reconnect: ReconnectPolicy = field(default_factory=ReconnectPolicy)
     health_check: Optional[HealthCheckConfig] = None
     direction: str = "reverse"  # "reverse" (-R) or "local" (-L)
+    # Forward-destination host as seen from the remote end (direction "local")
+    # or from this workstation (direction "reverse"). Defaults to loopback;
+    # set e.g. a k3s ClusterIP to tunnel to an in-cluster Service.
+    remote_host: str = "127.0.0.1"
     cert_command: Optional[str] = None