chore: lock the plugin boundary and remove 2.9.0 leftovers

plugins/docker/src/backend/connect.ts

@@ -250,6 +250,7 @@ export async function startConnect(
   ctx.ssh
     .connect<Client>(host, {
       purpose: "docker",
+      profile: "session",
       timeoutMs: CONNECT_TIMEOUT_MS,
       prompt: { ask },
     })

plugins/docker/src/backend/console.ts

@@ -200,6 +200,7 @@ export function registerConsole(ctx: PluginContext, log: DockerLogger): void {
 
         const { client, dispose } = await ctx.ssh.connect<Client>(host, {
           purpose: "docker-console",
+          profile: "stream",
           timeoutMs: 65_000,
         });
         if (ws.readyState !== WebSocket.OPEN) {

plugins/docker/src/backend/services.ts

@@ -92,7 +92,7 @@ export function registerServices(ctx: PluginContext, log: DockerLogger): void {
     const { runtime } = await readDockerHostSettings(ctx, hostId);
     const output = await ctx.ssh.withConnection<string, Client>(
       hostId,
-      { pool: POOL, purpose: "docker" },
+      { pool: POOL, purpose: "docker", profile: "session" },
       (client) => execOnClient(client, command(runtime)),
     );
     return handle(output);
@@ -161,7 +161,7 @@ export function registerServices(ctx: PluginContext, log: DockerLogger): void {
       const { runtime } = await readDockerHostSettings(ctx, watch.hostId);
       const output = await ctx.ssh.withConnection<string, Client>(
         host,
-        { pool: POOL, purpose: "docker" },
+        { pool: POOL, purpose: "docker", profile: "session" },
         (client) =>
           execOnClient(
             client,