feat: Remove rclone dependency

Originally intended to let us pull from aribtrary sources, it adds overhead vs just checking headers as we do for other sources and we use it exclusively to pull from our private maven repo, which already supports accessing private assets by prefixing a url with TOKEN@. 

Add support for this in keepup and remove rclone downloads.