add plugin cache dir to child PATH (last) when spawning

[j-lanson]

docker entrypoints for plugins will probably have references to artifacts in the plugin cache dir (such as a container file), but we don't execute the plugin from that directory so these files will fail to be found. Update the plugin child process's PATH at spawn time by pushing canon_working_dir.