Environment variable diff

Compare two `.env`-style files; values matching sensitive keys are redacted.