mr: Check if unsafe ENV variables are set

If e.g. $GIT_DIR is set, it's near certain that the user is about to
shoot their own foot so we abort.
mr: Add environment variable to check()
mr: Make check() even more pedantic