Set CVS_RSH in .zshenv so it is set for non-interactive shells.

 - This is so scripts run on the ssh command line that do cvs
   updates will work.