docs(ssh): document ssh workspace sessions

docs/explore-notes/conpty-sessions.md

@@ -11,7 +11,7 @@ process hosts (real `claude` TUI in a Mission Control tile).
 Autonomous queue tasks are **not** covered here — they stay on the stream-json path via
 `TaskRunner`. See [worker-task-pipeline.md](worker-task-pipeline.md).
 
-## The four session kinds
+## The five session kinds
 
 | Kind | Hub spec method | Notes |
 |---|---|---|
@@ -19,6 +19,7 @@ Autonomous queue tasks are **not** covered here — they stay on the stream-json
 | Ad-hoc | `GetAdHocLaunchSpec` | No `--effort` — CLI default |
 | Planning | (planning start/resume) | No `--effort`; uses `--permission-mode default`, **not** `plan` |
 | List handler | `GetMergeHelperLaunchSpec` / `GetMergeHelperHandoffLaunchSpec` | Model + effort fixed per role (`ModelRegistry.HandlerTriageAlias`/`HandlerWaitAlias`/`HandlerMergeAlias`), **not** from list config; `--permission-mode` via `PermissionModeResolver` (unattended) |
+| SSH workspace | `GetSshLaunchSpec` | Exe is `ssh.exe`, not claude: `-R <random port>:127.0.0.1:<remote_mcp_port>` + one remote shell command that base64-decodes a `claudedo` MCP config (per-session token) to `~/.claudedo/mcp-<paneId>.json` and runs claude. **Not** recorded in `mission_control_sessions`, no `claudedo_pane`/handoff hint. Workspaces: `app_settings.ssh_workspaces`, Settings → SSH-Workspaces |
 
 ## ⚠️ Gotcha: never pass task free-text as a CLI argument