As a follow-on to #691 which likely shouldn't have landed / should have supported this filtering to begin with.

We need a new flag, --allowed-env-vars=DOG,CAT to choose which env vars should be permitted into the runtime from the Wizer time environment.

This is an important s******y feature for V4.