ae4933044b
- Replace StrictHostKeyChecking=no with accept-new (verify on first connect) - Require ssh_known_hosts_file config key pointing to operator's known_hosts - Validate known_hosts file exists before attempting transfer - Fail explicitly if known_hosts not configured (prevents silent MITM vulnerability) - Uses -o UserKnownHostsFile=path to use pinned host keys