ssh tunnel host/user/key is hardcoded

tools/ssh-tunnel, last line.

• add a config/ and use it (config/os?)
• add to INSTALL, and build/app-config-files.ansible.yml
• only do the ssh-tunnel service if config exists
• add .ssh/config for it?