tca: Pass environment to child via a file

This allows us to safely pass the current environment to the child
process without affecting the privileged commands which are executed in
between.

That's the same technique we already use in tails-persistent-storage and
tails-installer.