loginctl: restore cgroup display for status output

Same for machinectl.
update TODO
shutdown: avoid malloc() if we can
core: rearrange if blocks a bit
core: grant user@.service instances write access to their own cgroup
update TODO
units: since we auto-spawn user@.service instances now we don need an [Install] section in it