update cnpg options to match upstream chart better

[jessebot]

also adds:

spec:
  env:
    - name: AWS_REQUEST_CHECKSUM_CALCULATION
      value: when_required
    - name: AWS_RESPONSE_CHECKSUM_VALIDATION
      value: when_required

which should fix that issue where sometimes boto3 will write garbage to the top of barman backup files.