update TODO
nspawn: update unit file

ControlGroup= is obsolete, so let's drop it from the default nspawn unit
file.