s3:waf:compare_config_h3.sh: make diff tool configurable as env var "DIFF"