Address automated CodeRabbit review feedback

- Assert root ownership and group for /etc/profile.d/01-tmout.sh in rspec tests
- Ensure MaxStartups scan validates single directive in sshd_config
- Normalize MaxStartups sed pattern to match tab/space indentations and quote chroot paths
- Quote chroot path expansions in TMOUT profile script creation

Author: karthickaliappa

bosh-stemcell/spec/support/os_image_shared_examples.rb

@@ -74,6 +74,8 @@
     describe file("/etc/profile.d/01-tmout.sh") do
       it { should be_file }
       it { should be_mode(0o644) }
+      it { should be_owned_by("root") }
+      its(:group) { should eq("root") }
       its(:content) { should match(/^readonly TMOUT=900$/) }
       its(:content) { should match(/^export TMOUT$/) }
     end
@@ -239,7 +241,7 @@
     end
 
     it "sets MaxStartups to 10:30:60" do
-      expect(sshd_config.content).to match(/^MaxStartups 10:30:60$/)
+      expect(sshd_config.content.scan(/^[ \t]*MaxStartups\s+\S+$/)).to contain_exactly("MaxStartups 10:30:60")
     end
 
     it "sets PermitEmptyPasswords to no (stig: V-38614)" do

stemcell_builder/stages/base_ssh/apply.sh

@@ -24,8 +24,8 @@ echo 'X11Forwarding no' >> $chroot/etc/ssh/sshd_config
 sed "/^ *MaxAuthTries/d" -i $chroot/etc/ssh/sshd_config
 echo 'MaxAuthTries 3' >> $chroot/etc/ssh/sshd_config
 
-sed "/^ *MaxStartups/d" -i $chroot/etc/ssh/sshd_config
-echo 'MaxStartups 10:30:60' >> $chroot/etc/ssh/sshd_config
+sed "/^[ \t]*MaxStartups/d" -i "$chroot/etc/ssh/sshd_config"
+echo 'MaxStartups 10:30:60' >> "$chroot/etc/ssh/sshd_config"
 
 sed "/^ *PermitEmptyPasswords/d" -i $chroot/etc/ssh/sshd_config
 echo 'PermitEmptyPasswords no' >> $chroot/etc/ssh/sshd_config

stemcell_builder/stages/bosh_users/apply.sh

@@ -38,8 +38,8 @@ echo "source /etc/profile.d/00-bosh-ps1" >> $chroot/home/vcap/.bashrc
 echo "source /etc/profile.d/00-bosh-ps1" >> $chroot/etc/skel/.bashrc
 
 # configure idle session shell timeout
-cat << 'EOF' > $chroot/etc/profile.d/01-tmout.sh
+cat << 'EOF' > "$chroot/etc/profile.d/01-tmout.sh"
 readonly TMOUT=900
 export TMOUT
 EOF
-chmod 0644 $chroot/etc/profile.d/01-tmout.sh
+chmod 0644 "$chroot/etc/profile.d/01-tmout.sh"