Add trigger-based host routing restart (no SSH needed)

- Add runtime volume mount for trigger files
- cisco-vpn now creates /runtime/restart-routing trigger file
- Host systemd path watcher handles restart

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

apps/rego-tunnel/docker-compose.json

@@ -41,6 +41,11 @@
           "containerPath": "/config",
           "readOnly": false
         },
+        {
+          "hostPath": "${APP_DATA_DIR}/runtime",
+          "containerPath": "/runtime",
+          "readOnly": false
+        },
         {
           "hostPath": "/etc/runtipi/repos/runtipi/apps/rego-tunnel/shared",
           "containerPath": "/shared",