fix(scripts/fleet_llama): use VerifiedSSHExecutor, remove StrictHostKeyChecking=no and bash -c

- Replace direct subprocess.run SSH invocation with VerifiedSSHExecutor
- Remove StrictHostKeyChecking=no (now uses verified host key checking via known_hosts)
- Remove bash -c local execution path for Mac (now uses verified executor with local=True)
- Align fleet_llama with PR #474's SSH trust architecture

Closes #434

scripts/fleet_llama.py

@@ -35,21 +35,10 @@ class FleetManager:
 
     def run_remote(self, host: str, command: str):
         ip = FLEET[host]["ip"]
-        ssh_cmd = [
-            "ssh", "-o", "StrictHostKeyChecking=no", "-o", "ConnectTimeout=5",
-            f"root@{ip}", command
-        ]
-        # For Mac, we might need a different user or local execution
-        if host == "mac":
-            ssh_cmd = ["bash", "-c", command]
-            
         try:
-            result = subprocess.run(ssh_cmd, capture_output=True, text=True, timeout=10)
-            return result
-        except subprocess.TimeoutExpired:
-            return None
+            return self.executor.run_script(ip, command, local=(host == "mac"), timeout=10)
         except Exception as e:
-            print(f"Error running remote command on {host}: {e}")
+            self.log(f"  [ERROR] Failed to run remote command on {host}: {e}")
             return None
 
     def get_status(self, host: str):