e1f937f42c
Each device gets a unique ed25519 keypair generated at preconfig time. Private key goes to Infisical (bigbrother/SSH_PRIVKEY_<ID>), public key to the SD card only. No operator keys or identifying comments on device.