Does this mean we should be migrating our SSH keys to post-quantum crypto right now?
OpenSSH has supported post-quantum key agreement since 2022, and since 10.1 (October 2025) you'll get a warning if your connection isn't using it. It doesn't require rotating your keys, just upgrading the software on both sides.
Post-quantum signatures will require rotating your keys, but that's less urgent.