Require env var for self-managed decomposition

Adds defense against accidental mis-configuration. We need this because
the configuration for two connections to one database is so similar to
two databases.