cli: Brighten web banner window colors (#194)

executor: Disable raw output for multi-host stacks (#190)

web: Prevent update badges from wrapping (#188)

executor: Separate result labels from stack identity (#186)

preflight: Clean up check diagnostics (#183)

preflight: Report SSH check failures clearly (#182)

* compose-farm: Restrict web route to local IPs

* preflight: Report SSH check failures clearly

* preflight: Report SSH check failures clearly

feat: color stack output prefixes (#180)

Add host filter to lifecycle commands (#179)

chore: refresh maintenance tooling (#177)

* chore: refresh maintenance tooling

* fix: restore cli startup budget

* fix: keep rich help in startup test

fix: Explicitly disable SSH agent when using dedicated keys (#176)

asyncssh defaults to querying SSH_AUTH_SOCK even when client_keys are
provided. If the agent socket is stale or broken (common with forwarded
agents in Docker/NAS environments), this causes a ConnectionResetError
that crashes the connection before the dedicated key is even tried.

Set agent_path=None when dedicated compose-farm keys exist so asyncssh
skips the agent entirely. The agent fallback path (when no dedicated
keys exist) is unchanged.