2cba23b804
`pkgs.ksshaskpass` no longer exists top-level (moved under kdePackages) and would drag in ~1 GB of KDE Frameworks. Reuse the pinentry-qt already pulled for GPG through a small SSH_ASKPASS wrapper instead: no new GUI toolkit, and ssh PIN prompts match the commit-signing dialog. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>