reduce env_rs_shift_to_menv to one cheat

pick a better witness for the new module environment - makes everything
much easier.

the remaining subgoal is about code_env_cd still holding, which I think
might require proving that the compiler generates the same code if
called with an extended module environment.