Optionally allow the user to enable strict host key checking

### Description

It would be useful if it was possible to have a template option which enables strict host key checking, and, optionally, the path to a known_hosts file.

This would introduce an additional layer of security when connecting to Lima hostnames, such as lima-default. The local port that they use may be reused by other services on the host when Lima VMs are powered off, and having strict host key checking would prevent accidental connections and/or data exposure (such as when syncing data).