STEP_050M07_B1B2B_R01_VM121_HMN_BRIDGE HMN bridge staged: inactive dedicated SSH account and narrowly scoped fixed-command wrapper; no key or service activation