Merge branch 'main' into claude/vault-unlock-logout-autosync-a84c35

Four files needed a hand, and all four were two branches adding something in
the same place rather than either changing what the other did.

The shell's constructor now takes both new parameters: main's SFTP session
factory, which it must have because it builds the transfers view model, and
this branch's optional resume handler, which stays last so every existing test
that constructs a shell without one still gets a shell that can only be online
because somebody signed in during this run. App.axaml.cs, ShellFlowTests and
QuickConnectTests pass the pair; the layout suite keeps both of its new fields.

Signing out now detaches the transfers screen exactly as locking does, and the
confirmation says that an open transfer session survives it. That is the same
policy both sides already argue for their own case: signing out destroys this
machine's copy of the vault, not work that authenticated before it.

QuickConnectTests did not compile on main — the SFTP commit added a constructor
parameter and the quick-connect suite, merged from a parallel branch just
before it, was still calling the old one. Fixed here rather than worked around,
since the merged tree has to build.

dotnet build, dotnet test and dotnet format --verify-no-changes are all clean:
980 tests, including the end-to-end suite against real containers.

src/DodoSSH.Client.App/App.axaml.cs

@@ -58,9 +58,13 @@ internal sealed partial class DodoSshApp : Application
         // for why the handshake is answered from a snapshot rather than by reading the vault per lookup.
         var knownHosts = new VaultKnownHostStore();
 
+        // One factory for both kinds of connection. Shells and file transfers start with the same handshake
+        // and the same host key decision, and composing two would mean two snapshots of the pins.
+        var connections = new SshNetConnectionFactory(knownHosts);
+
         var workspace = new TerminalWorkspace(
             new AvaloniaTerminalAssetProvider(),
-            new SshNetConnectionFactory(knownHosts),
+            connections,
             TimeProvider.System);
 
         workspace.Start();
@@ -82,6 +86,7 @@ internal sealed partial class DodoSshApp : Application
                 .SignInAsync(url, browser, TimeProvider.System, cancellationToken)
                 .ConfigureAwait(false),
             TimeProvider.System,
+            connections,
             passphraseProfile: null,
 
             // The other half of signing in: a refresh grant, no browser, and nobody present. It is what