fix: clear additional cartridge keys on disconnect

[tarrencev]

Summary

• Extend 'clear_controller_storage' to remove additional '@cartridge/*' entries that can persist across disconnect:
  • '@cartridge/features'
  • per-address policy keys under '@cartridge/policies//...'
  • domain-scoped active keys matching '@cartridge/{http,https}://.../active'
• Keep existing scoped cleanup behavior for account/session/deployment/admin keys and active/controller selectors.

Testing

• Added coverage in to assert:
  • policy entries for the disconnected address are removed
  • is removed
  • domain active key is removed
  • disconnected-address policy for one account is removed while other-address policy persists