Hi there,
I'd like to propose these fixes to the squid package. They are pretty self-documented, but it's basically a simple apparmor profile addition that is needed in order to make sure that squid can use /run/systemd/notify, and some modifications to make sure that the /run/squid directory gets created dynamically when the systemd service is started.