fix(systemd): give cloudconfig time to run

Ensure that cloudconfig has time to run before starting locksmith. We have to make a good effort at this for the `best-effort` scheduler to work.