Ilker ManapandClaude Opus 5.5
554b7bffd8
build-image.sh copied the build user's authorized_keys into the image unless told otherwise, so the images published with v0.2.0 and v0.2.1 let three lab keys in as root on commissioning machines. Keys are now opt-in (AUTHKEYS=); the lab deploy passes the deploy user's keys. The release workflow gets an image job: it builds the tag's agent/ on the PXE server in a directory of its own (the lab image stays), refuses an image with authorized_keys, and uploads it as commissioning-* (token over stdin). Tried by hand on pxe-server: built, no keys, new agents. Closes #29 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>