feat: add orphan EC2 cleanup on startup, fix SetupWizard routing, fix SSH key gen

- On startup, scan for EC2 instances with pp:managed=true and terminate any orphans
- SetupWizard now renders as full-page (no Layout wrapper)
- Fixed SSH RSA key generation (generateKeyPairSync with spki format)
- Removed unused import in orphanCleanup.ts
- Frontend rebuild with App.tsx routing fix

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

frontend/src/App.tsx

@@ -68,6 +68,12 @@ export default function App() {
         } />
         <Route path="/privacy" element={<Layout><Privacy /></Layout>} />
 
+        <Route path="/setup" element={
+          <ProtectedRoute>
+            <SetupWizard />
+          </ProtectedRoute>
+        } />
+
         <Route path="/*" element={
           <ProtectedRoute>
             <SetupCheck>
@@ -78,7 +84,6 @@ export default function App() {
                   <Route path="/repos" element={<Repos />} />
                   <Route path="/settings" element={<Settings />} />
                   <Route path="/admin" element={<Admin />} />
-                  <Route path="/setup" element={<SetupWizard />} />
                   <Route path="*" element={<Navigate to="/" replace />} />
                 </Routes>
               </Layout>