It clutters up the output and isn't super useful

This prevents it from e.g. needing a specific glibc version on the
client.

_thread.interrupt_main will trigger KeyboardInterrupt in the main thread.

This also ignores the "file changed while we backed it up" error, because
that isn't important enough to warrant sending an email.

We specifically don't want to catch BrokenPipeError; just list
file-related ones that we might expect to see if we hit bad
permissions, disk errors, or race conditions.

We might see these if files change during the scan, for example.

Was overly quoted from when this was a shell script

Put setup-time variables into a generated vars.sh, and put borg.sh
directly into the repo.

Since we want to run two commands, use a temporary SSH agent
to hold the key, so that the user only has to enter the password
once.

Put our own binary in here, so we can keep it updated with local
patches more easily.  Also add build instructions.
This one is built from
https://github.com/borgbackup/borg/pull/6011

Support multiple roots in config file, not just one.
The absolute path stuff before would match against exclusions/inclusions
based on paths from the root dir, but that doesn't make sense when we
have multiple roots, and added needless complexity.

We need to calculate size so we get an idea of actual used disk space
(which is closer to how much maximum space will be used in the backup,
in case files have huge holes).  Calculate it once to avoid errors.

By ensuring that directory names end in '/', the behavior of
"match only directories if the pattern ends with /" comes for
free based on how wcmatch.glob works, so we don't need to run
the regex match twice.