check for WP_CLI_PHP env variable and validate it

this also allows forcing a particular PHP binary