Enable SSH remotes in native frontends (#117)

apple/TESTING.md

@@ -22,7 +22,10 @@ actually exercised.
 
 The following are intentionally outside this milestone and must not be stubbed
 into the Apple apps: full CLI/TUI parity, command mode or command palette, SSH
-Git, non-TOTP Watch features, and production AutoFill behavior.
+Git UI, non-TOTP Watch features, and production AutoFill behavior. The Apple
+Rust bridge explicitly compiles storage without the optional `ssh` feature;
+typed SSH configuration therefore fails as unsupported before any connection
+until a future Apple target opts in.
 
 ## Security boundary audit
 
@@ -31,7 +34,8 @@ Git, non-TOTP Watch features, and production AutoFill behavior.
 - The Apple Rust crates are mechanical UniFFI projections. Swift may collect
   input and call those APIs; it does not open a password-store repository,
   calculate OTP, parse snapshots, or launch processes.
-- Git URLs are rejected unless they use HTTPS before transport work. The Watch
+- The shipped Apple bridge rejects non-HTTPS Git transport before connection;
+  the shared typed storage model may still parse SSH configuration. The Watch
   stores only the selected opaque snapshot in a passcode-protected, device-only
   Keychain item.
 - Apple production sources contain no logging calls. Secret values use typed