[ivangrynenko]

Summary

Align the WireGuard SSH deployment example with the accompanying public guide. The workflow is manually triggered, restricted to main, uses a protected environment and repository-scoped concurrency, pins the action to the reviewed commit, and deploys using a separate SSH key and verified host key. It cleans up the temporary SSH files and does not check out code or request token permissions for the example server-side command.

Validation

• Action input and setup tests pass with stubbed network operations; shell and workflow checks pass.
• The complete example has not been exercised end to end against a live WireGuard gateway and SSH target. This was explicitly deferred and the guide tells readers to test it on non-production infrastructure.

The companion guide is being prepared in the Sentinel repository. The action documentation can link to it once the guide is publicly available.