Warning: This build has drifted.
The coverage report for this pull request build may be inaccurate because its base commit is no longer the HEAD of its target branch.
This means it includes changes from outside the original pull request, including, potentially, unrelated coverage changes.

    • Learn more: For more information on this, see Tracking coverage changes for pull request builds.
    • Fix now: For a quick fix, rebase this PR at GitHub. Your next report should be accurate.
    • Prevent going forward: To avoid this issue with future PRs, see these Recommended CI Configurations.

fix: unify connection form UX and support passphrase-protected keys

- Fix silent failure when dropping a non-key file onto the private key
  dropzone; validation is now centralized in KeyDropZone with inline
  error feedback (previously dropped without any user-visible error).
- Rebuild NewConnectionOverlay (the "+ Add host" dialog shown once
  already connected) on top of the shared AuthFields/JumpSection
  components instead of its own hand-rolled markup, fixing an auth-tab
  ordering mismatch and bringing drag-and-drop, key-type badges, and
  profile save / ~/.ssh/config import to parity with the initial
  connect form.
- Classify SSH dial errors at the API boundary into short, actionable
  messages instead of surfacing raw wrapped Go errors; full detail is
  still preserved in the server log and connection log.
- Add backend decryption support for passphrase-protected private
  keys (ssh.ParsePrivateKeyWithPassphrase) with a matching inline
  passphrase field in the UI; passphrases are never persisted to
  saved profiles.