Add SshHostCollector for .180 (omv) and .171 (ripper)

Extends monitoring to the two bare-metal boxes Proxmox can't see.
Uses a dedicated ed25519 key with a forced authorized_keys command
(see docs/ssh-collector-key-setup.md) so a leaked key can only ever
run the fixed read-only stats script, never arbitrary commands.

CPU is approximated from 1-min load average / core count (a true
utilization % would need two /proc/stat samples).

Closes #8.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

config/hosts.yaml

@@ -3,3 +3,25 @@
 proxmox:
   host: 192.168.1.144
   node: pve
+
+# Bare-metal boxes Proxmox can't see. Connects with the dedicated
+# `monitor` SSH key (see docs/ssh-collector-key-setup.md), read-only commands only.
+sshHosts:
+  - id: omv
+    displayName: omv
+    group: Bare Metal
+    host: 192.168.1.180
+    username: root
+    diskPaths:
+      - path: /
+        label: os
+      - path: /srv/mergerfs/media
+        label: media
+  - id: ripper
+    displayName: ripper
+    group: Bare Metal
+    host: 192.168.1.171
+    username: jhodgkin
+    diskPaths:
+      - path: /
+        label: os