fix: add network dependency to start-tunneld and rename web reset to uninit

Add After/Wants network-online.target to prevent race where
start-tunneld starts before the network interface is up, causing
missing MASQUERADE rules. Rename `web reset` to `web uninit` for
clarity.

core/src/tunnel/web.rs

@@ -168,10 +168,10 @@ pub fn web_api<C: Context>() -> ParentHandler<C> {
                 .with_call_remote::<CliContext>(),
         )
         .subcommand(
-            "reset",
+            "uninit",
             from_fn_async(reset_web)
                 .no_display()
-                .with_about("about.reset-webserver")
+                .with_about("about.uninitialize-webserver")
                 .with_call_remote::<CliContext>(),
         )
 }