nixos/buildkite-agent: stop deploying public keys, make ssh private key optional.

SSH public keys aren't needed to clone private repos, and if we only
need to configure a single attribute, there's no need for the "openssh"
attrset anymore.