As long as the commands are not secret, you could have your terminal just fetch them from a web server after logging in via the console and source it if the has

As long as the commands are not secret, you could have your terminal just fetch them from a web server after logging in via the console and source it if the hash checksum of the page equals an expected value. If the checksum does not meet the expectation you either updated the commands in the file without updating the expected hash or the file server has been compromised.