Add POSTGRES_PASSWORD and USER, with warning on no password

This should probably be `<<'EOWARN'` to make sure we don't get accidental interpolation later (but we can't use `<<-'EOWARN'` here because of those spaces in the message -- we _could_ adjust the message to accommodate that, but "meh").