[rc/zsh] add a few env vars related to guix and certs