feat: harden local shell, SFTP, and desktop session reliability

Finder-launched terminals now inherit a login PATH so tools like ollama resolve, destructive SFTP/editor actions require confirmation, and terminal search plus window dragging work again. SSH forwards and RDP sessions keep listeners and survive reconnect without FastPath crashes.

Co-authored-by: Cursor <cursoragent@cursor.com>

src-tauri/src/services/ssh/known_hosts.rs

@@ -264,7 +264,7 @@ fn remove_known_host_entries(host: &str, port: u16) -> Result<(), String> {
     let retained = input
         .lines()
         .filter(|line| {
-            line.split_whitespace().next().map_or(true, |hosts| {
+            line.split_whitespace().next().is_none_or(|hosts| {
                 !hosts
                     .split(',')
                     .any(|candidate| candidate == label || (port == 22 && candidate == host))