feature(Vagrantfile): allow box and box_url customization through env vars