Leave the default sshd alone. If ssh is not necessary in default VRF, another role should disable it.
Set standardized interface names (mgmt0… for L2 management interfaces and lan0… for L3 data interfaces speaking BGP). ASN is stored as a custom field in netbox but that might change.