A Sharp Memory-Regret Trade-Off for Multi-Pass Streaming Bandits