fix: cloudflare tunnel connects to localhost:host_port instead of container_name:container_port

Root cause: start_cloudflared_tunnel was trying to connect to
http://{container_name}:{container_port}, but:
1. The host OS cannot resolve Docker container names
2. cloudflared runs on the host, so it needs the host-mapped port

Changes:
- start_cloudflared_tunnel: changed signature to accept host_port only
- Connects cloudflared to localhost:{host_port} via Docker port mapping
- Connectivity check uses localhost:{host_port}
- recreate_tunnel updated to match new signature
- Callers in tool_instances.py pass instance.port (host port)

Quality gates: pytest 42 passed

apps/api/src/services/lifecycle_hooks.py

@@ -120,9 +120,9 @@ async def publish_lifecycle_event(
     # Create notification for instance owner (fire-and-forget)
     # Skip intermediate "starting" notifications — only notify on terminal states
     # (failed or successful attempts)
-    _is_starting_intermediate = event_type == "instance.started" and (
-        status or instance.status
-    ) == "starting"
+    _is_starting_intermediate = (
+        event_type == "instance.started" and (status or instance.status) == "starting"
+    )
     if _is_starting_intermediate:
         return