We don't need a read-write key: we can just SSH directly to jim-backups@backup.jim.sh instead and run commands thay way. Remove read-write key and document it in the README. Also add some tools to update the README variables on updates.
Since we want to run two commands, use a temporary SSH agent to hold the key, so that the user only has to enter the password once.