fix(api): surface ssh local repair receipt contract

apps/api/src/services/ai_agent_log_controlled_writeback_executor_readback.py

@@ -558,6 +558,16 @@ def _harbor_recovery_receipt_inputs() -> list[dict[str, Any]]:
             ),
             **metadata_boundary,
         },
+        {
+            "input_id": "ssh_local_repair_output",
+            "source": "repair-110-ssh-publickey-auth-local.sh --check/apply",
+            "required_when": "after_remote_control_channel_diagnosis_phase",
+            "purpose": (
+                "prove non-secret 110 account, authorized_keys metadata, sshd "
+                "effective config, and SSH reload result before Harbor retry"
+            ),
+            **metadata_boundary,
+        },
         {
             "input_id": "local_console_recovery_output",
             "source": "recover-110-control-path-and-harbor-local.sh --check/apply",
@@ -646,6 +656,16 @@ def _harbor_recovery_receipt_output_contract() -> list[dict[str, Any]]:
             ),
             **metadata_boundary,
         },
+        {
+            "output_id": "ssh_local_repair",
+            "source": "harbor-registry-controlled-recovery-receipt.readback.ssh_local_repair",
+            "required_when": "after_110_local_ssh_publickey_auth_repair_receipt",
+            "purpose": (
+                "write back non-secret 110 target user, authorized_keys, sshd "
+                "publickey, AuthorizedKeysFile, and reload readiness signals"
+            ),
+            **metadata_boundary,
+        },
         {
             "output_id": "controlled_cd_lane_readiness",
             "source": "harbor-registry-controlled-recovery-receipt.readback.controlled_cd_lane_readiness",