New EnvUser

Add:
 - the EnvUser doc
 - support for setting the last login time for the EnvUser
 - factory methods for adding the envuser

Create the Admin EnvUser at bootstrap time.
We should also have 
```
func (e *EnvironmentUser) UserTag() names.UserTag {
    return names.NewUserTag(e.doc.UserName)
}
```