pub fn pubkey_path_for(display_path: &str) -> PathBufExpand description
Resolve the local public-key path for a key whose display_path is
~/.ssh/id_ed25519. Expands the tilde and appends .pub. The caller
is expected to validate the file exists before reading.