Allow sending password in ENV to "rake decrypt"

As an alternative to a .password file, set the ETS_PASSWORD
variable to decrypt the GPG datasets. Used for CI testing.