fix(cistech-tunnel): correct routing config and sync compose files

- host-routing.sh: Updated to use cistech values (172.30.0.10, br-vpn-static)
- config.json: Added TARGET_IP form field, bumped tipi_version to 2
- docker-compose.json: Added TARGET_IP environment variable
- docker-compose.yml: Synced with docker-compose.json (correct image, port 6080, all env vars)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

apps/cistech-tunnel/config.json

@@ -10,7 +10,7 @@
         "network"
     ],
     "description": "OpenConnect-SSO VPN running in an isolated namespace with noVNC for first-time SSO reconnects.",
-    "tipi_version": 1,
+    "tipi_version": 2,
     "version": "latest",
     "source": "local",
     "exposable": true,
@@ -48,6 +48,13 @@
             "type": "password",
             "env_variable": "VNC_PASSWORD",
             "required": true
+        },
+        {
+            "label": "Target IP",
+            "type": "text",
+            "env_variable": "TARGET_IP",
+            "required": false,
+            "hint": "IP address to route through VPN (for host routing)"
         }
     ],
     "supported_architectures": [