No SSH keys to manage
CI authenticates to orosu-server with a short-lived, per-client Ed25519-signed token instead of a shared SSH key spread across every pipeline and repository.
Install orosu-server once on your target machine, then let CI push deployment jobs to it over an authenticated WebSocket connection — no SSH, no SFTP scripts, no exposed production servers.