update_env

Stage env var overrides to apply on the next restart().

These are applied to os.environ immediately before the subprocess starts, keeping mutation scoped to the restart call.