Implemented initial SSH support. Memory pressure too high for HTTPS and

SSH. Dirty commit.

sdkconfig.defaults

@@ -10,6 +10,8 @@ CONFIG_SPIRAM_USE_CAPS_ALLOC=y
 # Active TLS material remains unencrypted in PSRAM until the hardening phase.
 CONFIG_MBEDTLS_EXTERNAL_MEM_ALLOC=y
 # CONFIG_MBEDTLS_INTERNAL_MEM_ALLOC is not set
+# HTTPS remains on ESP-IDF's mbedTLS backend; wolfSSL is linked only for wolfSSH.
+CONFIG_ESP_TLS_USING_MBEDTLS=y
 
 # Native USB OTG presents one CDC-ACM interface on the ESP32-S3 USB port.
 CONFIG_TINYUSB_CDC_ENABLED=y
@@ -21,12 +23,19 @@ CONFIG_TINYUSB_CDC_EP_BUFSIZE=512
 # Enable the TLS-only administration server; no plaintext HTTP listener is created.
 CONFIG_ESP_HTTPS_SERVER_ENABLE=y
 CONFIG_HTTPD_WS_SUPPORT=y
+# Reserve capacity for HTTPS/WebSocket clients plus two bounded SSH sessions.
+CONFIG_LWIP_MAX_SOCKETS=16
 # Keep work submission bounded; one-second socket timeouts limit shared-task stalls.
 # CONFIG_HTTPD_QUEUE_WORK_BLOCKING is not set
 
 # Certificate generation and HTTPS startup use nested cryptographic buffers.
 CONFIG_ESP_MAIN_TASK_STACK_SIZE=8192
 
+# Build wolfSSH and wolfCrypt without replacing the HTTPS TLS implementation.
+CONFIG_ESP_ENABLE_WOLFSSH=y
+# The managed component emits a generic RSA stack warning although this target disables RSA.
+CONFIG_ESP_WOLFSSL_NO_STACK_SIZE_BUILD_WARNING=y
+
 # Support WPA3-SAE for station profiles and the WPA2/WPA3 fallback AP.
 CONFIG_ESP_WIFI_ENABLE_WPA3_SAE=y
 CONFIG_ESP_WIFI_ENABLE_SAE_H2E=y