zuul: introduce 'zuul' system user

Will let us slowly migrate zuul server and merger daemons to run as zuul
users instead of jenkins. The real change is done in a future commit.

Change-Id: I0113f4282a27355eb01b7550667a072d4f32825f