feat(recovery): surface runner systemd timeout receipt

scripts/reboot-recovery/diagnose-110-ssh-publickey-auth.sh

@@ -83,6 +83,25 @@ probe_node_exporter() {
     echo "NODE_LOAD1_PER_CPU=$load1_per_cpu"
     awk -v ratio="$load1_per_cpu" 'BEGIN {print "NODE_LOAD_CLASSIFIER=" (ratio > 1.5 ? "high_load" : "load_not_high")}'
   fi
+  awk '
+    /^systemd_unit_info/ && /unit="(actions\.runner|awoooi-cd-lane)/ {
+      line=$0
+      unit=line
+      active=line
+      substate=line
+      sub(/^.*unit="/, "", unit)
+      sub(/".*$/, "", unit)
+      sub(/^.*active_state="/, "", active)
+      sub(/".*$/, "", active)
+      sub(/^.*sub_state="/, "", substate)
+      sub(/".*$/, "", substate)
+      classifier=active
+      if (active == "scrape_error" && substate ~ /timed out/) {
+        classifier="systemctl_show_timeout"
+      }
+      printf "SYSTEMD_UNIT unit=%s active_state=%s classifier=%s\n", unit, active, classifier
+    }
+  ' <<<"$metrics"
 }
 
 probe_tcp_banner() {

scripts/reboot-recovery/tests/test_cold_start_monitor_bounded_probes.py

@@ -118,10 +118,13 @@ def test_110_ssh_publickey_auth_diagnosis_is_bounded_and_read_only() -> None:
     assert "NODE_EXPORTER=ok" in text
     assert "NODE_LOAD1_PER_CPU" in text
     assert "NODE_LOAD_CLASSIFIER" in text
+    assert "SYSTEMD_UNIT unit=%s active_state=%s classifier=%s" in text
+    assert "systemctl_show_timeout" in text
     assert "cat /home" not in text
     assert "cat ~/.ssh/authorized_keys" not in text
     assert "cat \"$home_dir/.ssh/authorized_keys\"" not in text
-    assert "systemctl" not in text
+    assert "systemctl show" not in text
+    assert "systemctl is-active" not in text
     assert "chmod" not in text
     assert "chown" not in text