How to allow SSH from a specific IP only (without lockouts)

Allow SSH from a specific IP only with ufw, test the rule safely, and get back in if you ever lock yourself out.