transport.sftpImport()
Streams a remote path into Storage, then finalizes it using storage.* namespace/ACL rules.
Uses transport Secret formats and optional host-key pinning.
execution.log carries details.source and details.error (code/retryable/resource/reference/statusCode);
runtimeError may expose matching metadata.

