(PUP-3605) use correct usermod flag on OpenBSD for group management

this allows 'membership => inclusive' to remove groups if needed as
'-G' only appends on OpenBSD and doesn't set.

The spec test is slightly unrelated in that it ensures the creation still uses `-G`, but currently there are no tests available for `objectadd.rb` (should be added, but it's out of scope for this PR).
No, as that would break `membership => minimum` which merely ensures the listed `groups` are among those the user is a member of `-G`.