Stop overwriting $USER

It's evil to overwrite $USER in plow's .env file. Instead of using $USER, this commit updates plow to look for a $SSH_USER instead.

This is a BREAKING CHANGE.