sigsum-agent: Have systemd create the shared group directory

Problem: Since /var/run is empty at boot, the agent is unable to start until Ansible has run.

(Closes: glasklar/services/sigsum-logs#22 (closed))