SSH Hardening: Key-Based Auth, Fail2ban & Bastion Hosts

Disabling password auth, key-based login, sshd_config hardening, fail2ban jails, and bastion-host architecture for production access.