pub const DENYLIST: &[&str];Expand description
Permanent denylist — algorithms refused regardless of any override.
Per PRD §5.8.6 FR-78, broken algorithms stay broken: an operator
who needs to talk to a legacy peer must use an external tool
(ssh -W proxy + --insecure-skip-host-check) rather than
re-enabling them inside Gitway.
Names are lowercase ASCII; matching is case-insensitive via
is_denylisted. Russh 0.59 already excludes most of these by
default — the explicit list here is a defensive belt-and-suspenders
pass at the override boundary.