Add Typed SSH Service Controls

Provide admin-only SSH status plus generation-safe start, stop, and
single-session disconnect operations through the bounded dispatcher.
Include
Settings UI coverage, lifecycle safeguards, and host-side regression
tests.

tests/web_cookie_auth/run.py

@@ -60,6 +60,7 @@ settings = "--settings" in sys.argv
 serial_settings = "--serial-settings" in sys.argv
 accounts = "--accounts" in sys.argv
 broker = "--broker" in sys.argv
+ssh_settings = "--ssh" in sys.argv
 display = "--display" in sys.argv
 if display:
     HEADERS["nvs_flash.h"] = '#pragma once\n#include "esp_err.h"\nesp_err_t nvs_flash_init(void);\n'
@@ -248,7 +249,8 @@ with tempfile.TemporaryDirectory(prefix="web-cookie-auth-") as directory:
                     *(["-DHOST_ACCOUNTS"] if accounts else []),
                     *(["-DHOST_NETWORK"] if network else []),
                     *(["-DHOST_DISPLAY"] if display else []),
-                                        *(["-DHOST_BROKER"] if broker else []),
+                    *(["-DHOST_BROKER"] if broker else []),
+                    *(["-DHOST_SSH_SETTINGS"] if ssh_settings else []),
                     "-I" + str(tmp), "-I" + str(ROOT / "src"), *map(str, sources), "-lcrypto",
                     "-o", str(tmp / "test")], check=True, timeout=30)
     subprocess.run([str(tmp / "test")], check=True, timeout=20)