Embedded SSH key in /root/.ssh grants pull-time backdoor

Image ships with a pre-authorized public key; any host that mounts ~/.ssh from the container inherits the backdoor.

# Reproduction steps redacted under coordinated disclosure.
# Full PoC will be published with the advisory at embargo expiry.

$ zds reproduce ZDS-2025-0129