The entrypoint ran `rm -rf ~/.ssh` and copied the host SSH dir over it on
every start, deleting any key generated or saved inside the container and
overwriting same-named files. Replace it with sync_host_ssh, which merges:
container-created files are never touched, host-copied files are refreshed
or removed only while unedited (tracked in ~/.ssh/.triple-c-host-files),
and known_hosts is unioned. On first start without a manifest, differing
files are backed up to <name>.triple-c-backup before being replaced.
Unit tests run the function extracted from entrypoint.sh against temp dirs.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
shadowdaoandClaude Opus 5.5