Add govuk-assets user

In order to ensure that off-site backups of our assets aren't accessible
should the govuk-backup user become compromised, create a govuk-assets user
to own the assets files and folders. Ensure that its default shell is rSSH
to restrict attempts over any protocol other than those already defined in
the rSSH configuration.