fmt.Sprintf("%s:%d") produces invalid addresses for IPv6. Also adds mockable sshDial variable for testability.
- Mask query parameters in log output to prevent credential leakage - Document InsecureSkipVerify rationale for MikroTik self-signed certs - Document InsecureIgnoreHostKey rationale for SSH device connections - Add zeroBytes utility for future byte-slice credential clearing