Give cmd exec commands only the environment variables it needs

Also maybe, configure the `ni-dev-defra` context with this mechanism and avoid errors based on wrong env configuration.

```golang
cmd := exec.Command("ansible-playbook", args...)
cmd.Env = os.Environ()
cmd.Env = append(cmd.Env, "MY_VAR=some_value")
```