Sleepy VMs: idle VMs sleep to free RAM and wake on the first inbound TCP connection

Puts an idle VM to sleep and resumes it on demand via host reboot recovery or — transparently — the first inbound TCP connection. Sleeping VMs keep their disk but release RAM to the host. Opt-in per VM via `sleep_on_idle`.