Stop Hand-Crafting Service Users: Practical `systemd-sysusers` for Declarative Linux Accounts

Use `systemd-sysusers` to create service users and groups declaratively on Linux, validate changes safely with dry runs, and pair account creation with the right directory-management workflow.