envsubst: debug ON OFF feature

by default envsubst will print a diff of the modified file. this might not be desired, as the credentials may be saved by some logging software.

we should propose the ability to disable the debug and make the debug disabled by default