core: always create /dev/kdbus/ns (and make it private 0700) after setting up the kdbus system bus
bus: when entering an existing namespace to connect to a container's system bus also switch over PID namespace

This is necessary to ensure that kdbus can collect creds of the
destination namespace when connecting.