Identity is visible via the same commands over interactive SSH but not from this job's own process, even within a single merged step - adding whoami/HOME/path/keychain-info printouts to see what's actually different about this execution context before guessing further.