Fixes #5172: Run the ncf api as the ncf-api user instead of the httpd one and add the configuration repository to the rudder group