Install shadow-utils in root, move breakpoint to post-NSS

For more easily debuging nss-altfiles; one can set a breakpoint here,
and then chroot in to test things.
fedostree/README.md: Two updates