debian: Use a configurable group for the Jenkins user

Typical Debian practice is to have one equally-named group per system user.  Make that for the jenkins user by default, but allow it to be overridden in `/etc/default/jenkins`, same as for the user name.