d/unbound.postinst: fix configure action to have unbound user/group created

While at it, use profile name specifier in the Apparmor profile, the old style being deprecated. Also mention the intended (optin) chroot setting is best set to "/var/lib/unbound".