Resolve open non-Samba discussions

[bifrost0x]

Summary

• add a localized Duplicate action that opens a new saved-connection draft with all editable source settings and a bounded copy-name suffix
• add action-bound, audited global known_hosts import with strict one-line validation, duplicate/conflict handling, and no raw key material in API responses
• display bounded SSH authentication banners for targets and jump hosts before any forwarding channel, shell, tmux probe, or startup command opens; fail closed on decline, disconnect, or timeout
• add explicit Passkey-backed MFA activation so enrolling a Passkey no longer leaves an unnoticed password-only fallback, including one-time recovery-code generation
• document the exact Passkey login/MFA modes, global host-trust workflow, SSH protocol banner timing, and profile duplication behavior

Discussions

• Global SSH host key management #150
• MFA and passkeys #148
• Clone option in Saved Connections #138
• Pre-login banners #125

The Samba discussion is intentionally out of scope. This PR also does not introduce an administrator-enforced MFA mandate: a safe global mandate still needs enrollment grace periods, recovery/break-glass rules, and explicit handling for service and directory-managed accounts.

Verification

• Python: 2,179 passed, 29 skipped in the full sandboxed suite; the 4 loopback-socket tests excluded by the sandbox all passed separately outside it
• Targeted regression suite: 108 passed
• JavaScript: all 32 test files passed
• git diff --check passed

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 603563e182

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".