feat: SSH card UX, agent version sync, persistent ssh_admin_ok (0.11.5)

Silent SSH probe on host card open; manual test feedback auto-hides. Persist ssh_admin_ok in DB (migration 019). After agent update read version from host and refresh UI.

backend/tests/test_health.py

@@ -4,6 +4,6 @@ from app.version import APP_NAME, APP_VERSION, APP_VERSION_LABEL
 
 
 def test_version_constants():
-    assert APP_VERSION == "0.11.2"
+    assert APP_VERSION == "0.11.5"
     assert APP_NAME == "Security Alert Center"
-    assert APP_VERSION_LABEL == "Security Alert Center v.0.11.2"
+    assert APP_VERSION_LABEL == "Security Alert Center v.0.11.5"

backend/tests/test_linux_admin_settings.py

@@ -116,6 +116,11 @@ def test_host_ssh_test_success(jwt_headers, client, db_session, monkeypatch):
     assert body["ok"] is True
     assert "hostname=ubabuba" in body["message"]
     assert body["target"] == "ubabuba"
+    assert body["ssh_admin_ok"] is True
+
+    db_session.refresh(host)
+    assert host.ssh_admin_ok is True
+    assert host.ssh_admin_checked_at is not None
 
 
 def test_host_agent_update_success(jwt_headers, client, db_session, monkeypatch):
@@ -149,3 +154,5 @@ def test_host_agent_update_success(jwt_headers, client, db_session, monkeypatch)
     body = response.json()
     assert body["ok"] is True
     assert body["target"] == "ubabuba"
+    if "product_version" in body:
+        assert body["product_version"] is None or isinstance(body["product_version"], str)

backend/tests/test_ssh_connect.py

@@ -182,13 +182,21 @@ def test_run_ssh_monitor_update_runs_script(monkeypatch):
                 target="h",
                 stdout="ready\n",
             )
-        assert kwargs["remote_cmd"] == "/opt/scripts/update_ssh_monitor.sh"
-        assert kwargs.get("need_root") is True
+        if calls == 2:
+            assert kwargs["remote_cmd"] == "/opt/scripts/update_ssh_monitor.sh"
+            assert kwargs.get("need_root") is True
+            return ssh_connect.SshCommandResult(
+                ok=True,
+                message="SSH OK",
+                target="ubabuba",
+                stdout="SUMMARY updated 2.1.0-SAC\n",
+                exit_code=0,
+            )
         return ssh_connect.SshCommandResult(
             ok=True,
-            message="SSH OK",
+            message="ok",
             target="ubabuba",
-            stdout="SUMMARY updated\n",
+            stdout='2.1.0-SAC\n',
             exit_code=0,
         )
 
@@ -196,4 +204,11 @@ def test_run_ssh_monitor_update_runs_script(monkeypatch):
 
     result = run_ssh_monitor_update(target="ubabuba", user="root", password="pw")
     assert result.ok is True
-    assert calls == 2
+    assert result.agent_version == "2.1.0-SAC"
+    assert calls == 3
+
+
+def test_parse_ssh_monitor_version_text():
+    assert ssh_connect.parse_ssh_monitor_version_text("SSH_MONITOR_VERSION=2.1.0-SAC") == "2.1.0-SAC"
+    assert ssh_connect.parse_ssh_monitor_version_text("SUMMARY updated 2.1.1-SAC done") == "2.1.1-SAC"
+    assert ssh_connect.parse_ssh_monitor_version_text("no version") is None