Reject control characters in environment variables

Newlines in environment variables broke Dockerfile rendering and executed arbitrary directives; now validated on save and before rendering.