add missing tunnel retries

[rasdani]

adds retry on a missing time oute exception and distinguishes between idempotent requests similarly to GET vs. POST in sandbox packgage.

---

Note

Medium Risk
Changes retry behavior for GET/DELETE calls to include timeouts, which can alter client-side failure modes and potentially repeat server work if the endpoint is not truly idempotent.

Overview
Improves tunnel client resiliency by splitting retry behavior by request type.

TunnelClient now keeps timeouts non-retryable for non-idempotent requests (e.g., POST create_tunnel), but retries GET/DELETE operations on httpx.TimeoutException via a new _idempotent_request_with_retry, and routes get_tunnel, list_tunnels, delete_tunnel, and bulk_delete_tunnels through it.

^{Written by Cursor Bugbot for commit 4b000f0. This will update automatically on new commits. Configure here.}

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 4b000f06a8

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".