fix: exact container name matching in get_container_id/get_container_name

docker ps --filter name= uses substring matching, so searching for
code-server-headquarter-abc123 also matches tunnel-code-server-headquarter-abc123.
This caused start_instance to store the tunnel container's ID instead of the
tool container's ID, breaking tunnel connectivity and all container operations.

Switched both helpers to docker inspect, which does exact name matching.

Quality gates: ruff clean

apps/api/src/api/tool_instances.py

@@ -2554,11 +2554,23 @@ async def recreate_tunnel_endpoint(
 
         # Also probe from inside the API container directly to the target
         probe = subprocess.run(
-            ["curl", "-s", "-o", "/dev/null", "-w", "%{http_code}", "--max-time", "5", target_url],
+            [
+                "curl",
+                "-s",
+                "-o",
+                "/dev/null",
+                "-w",
+                "%{http_code}",
+                "--max-time",
+                "5",
+                target_url,
+            ],
             capture_output=True,
             text=True,
         )
-        logger.info("Direct probe from API to %s: HTTP %s", target_url, probe.stdout.strip())
+        logger.info(
+            "Direct probe from API to %s: HTTP %s", target_url, probe.stdout.strip()
+        )
 
         instance.tunnel_id = tunnel_info["container_name"]
         instance.public_url = tunnel_info["url"]