common: Log stderr output from spawned commands to journal

This lets us assign it to the right process name in the journal
rather than letting it fall through to stderr on its own.

This also fixes logging stderr of remote cockpit-agent invocations
(ie: via ssh)