ci/woodpecker/push/woodpecker Pipeline was successfulDetails
All tunnel clients use ~/.ssh/ca-userkey — one key, no divergence.
Server now re-reads authorized_keys on every auth attempt so adding
a key never requires a restart. README documents the two failure
modes (missing key, stale cache) with fix steps.
Co-authored-by: Cursor <cursoragent@cursor.com>