The key keeper is ssh-client's published package sshkeys, taken by series by the three build modules; Said, KindBuilder, ExecRunnerClean from the Delivery sdk (B5d; ADR 0634 §1; issue 1966)

Claude-Session: https://claude.ai/code/session_01NcbgfFSnn24M3GcqttoU7i

modules/ssh-client/cmd/ssh-client-tools/keykeeper_bus_test.go

@@ -15,7 +15,7 @@ import (
 	"testing"
 	"time"
 
-	"git.novox.be/novox/mesh-sdk/go/forgekey"
+	"git.novox.be/novox/mesh-catalog/modules/ssh-client/sshkeys"
 	"github.com/nats-io/nats-server/v2/server"
 	"github.com/nats-io/nats.go"
 	"github.com/nats-io/nats.go/jetstream"
@@ -171,7 +171,7 @@ func TestTheKeyProcessMakesTheKeyAndPutsItsEntryOverTheBus(t *testing.T) {
 	if raw == nil {
 		t.Fatalf("no entry %s in the keys state within 60 s", key)
 	}
-	var e forgekey.KeyEntry
+	var e sshkeys.KeyEntry
 	if err := json.Unmarshal(raw, &e); err != nil {
 		t.Fatal(err)
 	}
@@ -181,7 +181,7 @@ func TestTheKeyProcessMakesTheKeyAndPutsItsEntryOverTheBus(t *testing.T) {
 	if strings.Contains(strings.ToUpper(string(raw)), "PRIVATE") {
 		t.Errorf("the entry carries private material: %s", raw)
 	}
-	info, err := os.Stat(filepath.Join(home, ".ssh", forgekey.KeyFile))
+	info, err := os.Stat(filepath.Join(home, ".ssh", sshkeys.KeyFile))
 	if err != nil {
 		t.Fatal(err)
 	}