Uncommented the hand-rolled restic-offsite service and switched to the
non-deprecated --from-* flag family (destination = offsite via
--repository-file/--password-file, source = local repo via
--from-repo/--from-password-file). The timer now references a service
that actually exists.