0c4a4ec02c
Live finding: SFTP-mode ssh-copy-id mktemp's under ~/.ssh; the container image has no /root/.ssh, so the install died locally AFTER the one-time password was consumed (fail-safe held; password never transmitted). Probe confirmed the pinned known_hosts + StrictHostKeyChecking=yes chain is sound against the real box once ~/.ssh exists. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PSK5g6qYLknKj8u3QAFEr6