Partnership echo/log audit pass + exit trap

Exit trap (_pm_trap_restart_stopped) in partnership_manager.sh: restarts locally
stopped containers if script crashes mid-cleanup; partnership_offboard.sh registers
same trap. echo/log audit: step result lines (stack deployed counts, state writes,
onboard/offboard complete) → echo; check mode ACTIVE/INACTIVE status → echo;
ssh_setup.sh key-exists and install/verify results → echo. Manual-Partnership.md:
added Output Tiers section.

Partnership/ssh_setup.sh

@@ -290,8 +290,8 @@ echo "━━━ $ICON_GEAR Key Generation ━━━"
 
 if [[ -f "$SSH_KEY_PATH" ]] && [[ "$FORCE" == false ]]; then
     local_fp=$(ssh-keygen -lf "$SSH_KEY_PATH" 2>/dev/null || echo "unreadable")
-    log "Key already exists — skipping generation (--force to regenerate)"
-    log "  $local_fp"
+    echo "Key already exists — skipping generation (--force to regenerate)"
+    echo "  $local_fp"
 else
     if [[ "$FORCE" == true ]] && [[ -f "$SSH_KEY_PATH" ]]; then
         warn "Regenerating key (--force) — existing key will be replaced"
@@ -339,7 +339,7 @@ else
 
     if ssh-copy-id -i "$SSH_PUB_PATH" -o ConnectTimeout="${SSH_TIMEOUT:-15}" \
         root@"$REMOTE_SERVER" 2>/dev/null; then
-        log "Public key installed on $REMOTE_SERVER_NAME ✅"
+        echo "Public key installed on $REMOTE_SERVER_NAME ✅"
     else
         error "ssh-copy-id failed — check that:"
         error "  1. Remote server is reachable: tailscale status"
@@ -355,7 +355,7 @@ echo "━━━ $ICON_VERIFY Verify SSH Auth ━━━"
 
 if [[ "$DRY_RUN" == false ]]; then
     if test_ssh_auth "$REMOTE_SERVER"; then
-        log "SSH auth to $REMOTE_SERVER_NAME working ✅"
+        echo "SSH auth to $REMOTE_SERVER_NAME working ✅"
         # Reset any existing strikes
         if [[ -f "$SSH_STRIKE_FILE" ]]; then
             write_strike_file 0 "" "$(date '+%Y-%m-%d %H:%M:%S')"