nixos/jekins: add services.jenkins.extraGroups option

This makes it easy to give jenkins extra privileges by adding group
memberships. Use with care :-)