Command Auditing in an SSH Terminal: What the Client Can See, and What Only the Server Can Enforce

SSH command auditing: client hints vs server ForceCommand, bash DEBUG hooks, and forgeable in-band markers.