Add RNG to `Env`

[casey]

Add a rng object to Env, initialized deterministically (probably with 0) for testing, and with a secret from the OS otherwise.

This can be used to make RNG calls deterministic during testing, which seems valuable.