Make the rootfs R/O.

[9600]

Configure OverlayFS so that we have a read-only rootfs. Need to:

• Confirm this won't cause any problems and if need be reconfigure processes that write e.g. logs.
• Enable OverlayFS
• Write helper script. May make sense to just wrap toggling R/W + git pull in an update command.