Harden OS

[SublimeDelusion]

Apply baseline security hardening.

Scope:

• Disable password SSH login
• Configure firewall (deny by default)
• Enable automatic security updates
• Verify minimal open ports

Validation:

• External port scan shows only intended services
• SSH key login required