The key keeper is ssh-client's published package sshkeys, taken by series by the three build modules; Said, KindBuilder, ExecRunnerClean from the Delivery sdk (B5d; ADR 0634 §1; issue 1966)

Claude-Session: https://claude.ai/code/session_01NcbgfFSnn24M3GcqttoU7i

modules/mesh-build-node/cmd/mesh-build-node/main.go

@@ -15,9 +15,9 @@ import (
 	"strings"
 	"time"
 
+	dforgekey "git.novox.be/novox/mesh-delivery/sdk/forgekey"
 	stdio "git.novox.be/novox/mesh-sdk/go"
 	"git.novox.be/novox/mesh-sdk/go/delivery"
-	"git.novox.be/novox/mesh-sdk/go/forgekey"
 )
 
 // CacheDir is the cache directory, outside the account's home (ADR 0466 §1; module.json resource `cache`).
@@ -42,7 +42,7 @@ func main() {
 		Node:                strings.TrimSpace(os.Getenv("MESH_NODE")),
 		Reload:              func() (Recipe, error) { return ReadRecipe(paths.LockPath()) },
 		Probe:               ProbeNode,
-		Toolchain:           &Toolchain{Paths: paths, Run: forgekey.ExecRunnerClean(0), Registry: registry},
+		Toolchain:           &Toolchain{Paths: paths, Run: dforgekey.ExecRunnerClean(0), Registry: registry},
 		Toolchains:          stdio.State(delivery.ToolchainsState).Put,
 		Emit:                func(t string, b any) error { return stdio.Emit(t, b) },
 		Steps:               stdio.State(delivery.StepsState).Put,
@@ -51,7 +51,7 @@ func main() {
 		ReadPauses:          readOf(stdio.State(delivery.PausesState)),
 		ReadToolchainsState: readOf(stdio.State(delivery.ToolchainsState)),
 		Work:                WorkDir,
-		Run:                 forgekey.ExecRunnerClean(0),
+		Run:                 dforgekey.ExecRunnerClean(0),
 		Ctx:                 ctx,
 		Say:                 logf,
 		Bubblewrap:          ProbeBubblewrap,