russh try_sign: asynchronous confirmation can sign after agent lock

Summary In russh 0.65.0, a sign request for a confirmation-constrained key can retain and use the private key after another connection locks the agent. trysign snapshots an Arc before awaiting Agent::confirm and does not revalidate the shared lock state after the await. An agent-forwarding peer c...