SSH password auth is ON on the Jetson — do not disable
Don't merge phase0/custom-graph worktree until security fixes verified
Don't background rclone authorize during OAuth