GCE: Firewall: use warn_if_changed(), cleanup
GCE: Firewall: factor out destruction
GCE: Instance: improve nixops info appearance
GCE: Documentation: ENV variables