add bosh_chroot cookbook; upgrade bosh_sysctl to use it