Allow `env` to specified for groups in zapp.yaml

Some special handling is needed, since `env` needs to be packed inside
the `exec` object of the boot/system.map.