The nvim-config remote is git@github.com, and the SSH key lives in the
login shell's ssh-agent, which launchd jobs don't see. launchd's own
agent has no keys, so every scheduled pull failed with "Permission
denied (publickey)". The repo is public, so rewrite GitHub SSH URLs to
HTTPS for this job through GIT_CONFIG_* variables. The checkout's
remote stays SSH for interactive use.
The one-line bash -c string had been re-wrapped mid-command, so bash
ran a bare pkill, then a headless nvim that never exited, and never
reached git pull. launchd won't start a job that is still running, so
the config had stopped updating altogether.
Put one command per line, escape &&, and move PATH into
EnvironmentVariables. Rename the plist to match its label, which is
also the name setup_automations.sh bootstraps; before this, a fresh
install downloaded update-nvim-config.plist and then failed to load it.
Jason Ross