fix(checkpoint): narrow SSH auth-failure detection needles

Drop generic "Could not read from remote repository" and speculative passphrase/banner needles so network outages don't get an ssh-agent hint.