feat: add ssh server (sshd)

programs/data/config/init.toml

@@ -27,6 +27,14 @@ enabled = true
 wait = false
 optional = true
 
+# Remote shell access is opt-in.  Enable this from Settings > SSH Server.
+[services.ssh]
+path = "0:/os/sshd.elf"
+name = "SSH server"
+enabled = false
+wait = false
+optional = true
+
 [services.login]
 path = "0:/os/login.elf"
 enabled = true

programs/data/config/ssh.toml

@@ -0,0 +1,7 @@
+# SSH server policy. The host key is generated locally on first start.
+[server]
+port = 22
+
+# Per-user access defaults to false when a user is not listed. The SSH Server
+# Settings applet maintains this table.
+[allow]