reproducible debian: move the "inner" systemd service to a user unit

this saves us from having to give extra privileges to the script to
start the worker services

Signed-off-by: Mattia Rizzolo <mattia@debian.org>