Function forced_command_line 

pub fn forced_command_line(install_dir: &str, pubkey: &str) -> String

The exact authorized_keys entry for the forced-command key: restricted to running git-ark shell against this host’s own config, with no pty, port/agent/X11 forwarding. Uses the absolute install_dir — sshd does not expand $HOME in command=.