Configure instance VPC with GROUP and SUBNET vars.

Previously, pave could not create instances running on subnets or set
security groups. See .env.sample for details of how to use these
variables.

Paired with @jbabe on this.