resolved: split out writing of resolv.conf

manager_write_resolv_conf() is quite long anyway.
resolved: apply label to /run/systemd/resolve/resolv.conf

Under an SELinux system, we want the file that is created to
have a proper context, different from the default for files in /run.
This is so that the policy can give access to almost everyone to
this file.