Harden managed SSH config include from review

- Prevent unrelated includes from falsely blocking installation
- Preserve global settings by placing include before host blocks and adding Match all
- Parse target destination to match bare hostnames and record User directive
- Support custom port in managed host entry
- Add file locking to serialize concurrent syncs
- Handle symlinked SSH config files cleanly

Author: jie.yuan