We don't need a read-write key: we can just SSH directly to jim-backups@backup.jim.sh instead and run commands thay way. Remove read-write key and document it in the README. Also add some tools to update the README variables on updates.
Put setup-time variables into a generated vars.sh, and put borg.sh directly into the repo.