SSH host key verification disabled - MITM on Hetzner deployments

[consigcody94]

Found via code audit. internal/hetzner/client.go:347. ssh.InsecureIgnoreHostKey() on all connections. Deployment scripts include .env with API tokens transmitted over unverified SSH.