fix(recovery): surface 110 ssh account metadata receipt

apps/api/tests/test_harbor_registry_controlled_recovery_receipt.py

@@ -30,6 +30,16 @@ def test_harbor_recovery_receipt_accepts_verified_repair() -> None:
     assert payload["readback"]["ssh_local_repair"][
         "control_channel_metadata_ready"
     ] is True
+    assert payload["readback"]["ssh_local_repair"]["account_metadata_ready"] is True
+    assert payload["readback"]["ssh_local_repair"]["target_user_account_locked"] is False
+    assert payload["readback"]["ssh_local_repair"]["target_user_shell_executable"] is True
+    assert payload["readback"]["ssh_local_repair"]["sshd_pubkeyauthentication"] == "yes"
+    assert (
+        payload["readback"]["ssh_local_repair"][
+            "sshd_authorized_keys_file_default"
+        ]
+        is True
+    )
     assert payload["readback"]["watchdog_repair"]["harbor_ready"] is True
     assert payload["readback"]["post_apply_verifier"]["registry_v2_ready"] is True
     assert payload["readback"]["deploy_marker"]["deploy_marker_verified"] is True
@@ -877,9 +887,11 @@ AWOOOI_110_SSH_PUBLICKEY_AUTH_LOCAL_REPAIR mode=apply target_user=wooo
 SSH_SERVICE_ACTIVE=active
 SSHD_CONFIG_SYNTAX=ok
 USER_STATUS user=wooo exists=1 home=/home/wooo
+ACCOUNT_METADATA user=wooo passwd_status=P account_locked=false shell=/bin/bash shell_exists=true shell_executable=true
 PATH_STATUS path=/home/wooo mode=755 owner=wooo group=wooo type=directory
 PATH_STATUS path=/home/wooo/.ssh mode=700 owner=wooo group=wooo type=directory
 AUTHORIZED_KEYS_STATUS path=/home/wooo/.ssh/authorized_keys exists=1 bytes=380 lines=1
+SSHD_EFFECTIVE_CONFIG available=true pubkeyauthentication=yes passwordauthentication=no kbdinteractiveauthentication=no usepam=yes maxstartups=10:30:100 authorized_keys_file_default=true
 APPLIED permissions target_user=wooo home=/home/wooo
 SSHD_CONFIG_SYNTAX_AFTER_APPLY=ok
 SSH_RELOAD=skipped