randomize timer and get token from environment

deploy/pkgstash-refresh.service

@@ -4,4 +4,5 @@ Description=[refresh pkgstash db files]
 [Service]
 Type=oneshot
 User=pkgstash
-ExecStart=/usr/bin/curl -s -X POST -H "Authorization: Bearer <token>" http://localhost:8090/api/refresh
+EnvironmentFile=/etc/pkgstash/pkgstash.env
+ExecStart=/usr/bin/curl -s -X POST -H "Authorization: Bearer ${PKGSTASH_TOKEN}" http://localhost:8090/api/refresh

deploy/pkgstash-refresh.timer

@@ -3,6 +3,7 @@ Description=Refresh pkgstash db files
 
 [Timer]
 OnCalendar=*-*-* 02:00:00
+RandomizedDelaySec=30m
 Persistent=true
 
 [Install]