Send keepalive every 30s to prevent NAT/firewall from silently dropping idle SSH connections. Add deploy workflow that auto-deploys to production server after CI passes on main.
