wmflib: add ensure_service()

Like ensure_directory() and ensure_link().

Change-Id: I2f061083c2c41eaa3f6688cb61f6fa632ec62103