Give the mirror the terminal step its half of phase 1 actually needs, instead of a button that cannot answer a password prompt

Partnership/partnership_onboard.sh

@@ -194,6 +194,7 @@ SKIP_WEBHOOK_SETUP=false
 SKIP_MEDIA_SEED=false
 SKIP_WEBHOOK_LISTENER=false
 PHASE1_ONLY=false   # OWNER: SSH + conf push only (HOST2 not yet installed)
+                    # MIRROR: SSH key install only, no owner notification
 PHASE2_ONLY=false   # OWNER: containers/arr/onboard only (triggered by HOST2 after it onboards)
 SKIP_ARM=false      # leave the sync gates as they are — see Step 9e
 FILTERED_ARGS=()
@@ -342,6 +343,20 @@ if [[ "$AM_MIRROR" == true ]]; then
         exit 1
     fi
 
+    # Stop after the key when asked. ssh_setup.sh runs ssh-copy-id, which prompts for the
+    # owner's root password on a first install — answerable in a terminal, never from the
+    # WebGUI button, which is why the mirror's panel sends the operator to a terminal for
+    # exactly this step and nothing more. The flag was parsed but only ever honoured on the
+    # owner path, so a mirror asked for phase 1 silently ran the whole thing.
+    if [[ "$PHASE1_ONLY" == true ]]; then
+        echo ""
+        echo "━━━━━ $ICON_SUMMARY MIRROR PHASE 1 COMPLETE ━━━━━"
+        echo "  SSH key: ready"
+        echo "  Next:    press ▶ Onboard on the Partnership tab to notify $OWNER"
+        echo "━━━━━━━━━━━━━━━━━━━━━━━"
+        exit 0
+    fi
+
     echo ""
     echo "━━━ Step 2/2 — Notify Owner to Run Phase 2 ━━━"
     echo ""