fix(env): run Python inside environments in isolated mode

this avoids issues when `PYTHON*` environmental variables are set, and
prevents the CWD from being added to `sys.path` (and thus clobbering
stdlib names)