I have just published what I believe is the most comprehensive, hopefully best written and easiest to follow OpenSSH deployment guide, focusing on certificate deployment. Feedback welcome.
The guide is particularly useful to anyone using Proxmox with Home Assistant and other workloads requiring secure SSH access without much administrative overhead.