fix: harden local proxy and import boundaries

frontend/scripts/test-regressions.js

@@ -324,6 +324,21 @@ assertContains(
   "window.go?.api?.Service",
   "Wails service bridge must use the normal named Wails API",
 );
+assertContains(
+  "frontend/src/js/sshkeys.js",
+  "textContent: \"Failed to load keys: \" + String(err)",
+  "SSH key manager errors must be rendered as text rather than injected HTML",
+);
+assertContains(
+  "frontend/src/js/sshkeys.js",
+  "textContent: message",
+  "SSH key delete confirmation messages must be rendered as text",
+);
+assertNotContains(
+  "frontend/src/js/sshkeys.js",
+  "Failed to load keys: ${err}",
+  "SSH key manager must not interpolate backend errors into innerHTML",
+);
 assertContains(
   "frontend/package.json",
   '"@xterm/xterm":',