Add CI/CD step to upload artifacts off-site

[yungcomputerchair]

Non-PR pushes now trigger a job to compress and SCP artifacts to a predefined endpoint. Secrets that need to be added before this works:

• BOT_SSH_KEY: private SSH key to access endpoint
• ENDPOINT: full path to destination e.g. user@host:/tmp/...