Add support for per-environment extensions

[jeffb4]

mu support for CFN extensions is currently per-namespace.

When adding extensions such as mu-cfn_nag, it would be desirable to only apply the extension to a particular environment, so that unnecessary actions are not repeated and feedback is not delayed to the user.