systemd/tmpfiles: change directory owner to root

Change the owner of kresd files to root:knot-resolver. This improves behaviour for Fedora, where kresd can run under root (e.g. in Docker). Otherwise, running kresd as root on Fedora would fail because of dropped capabilities and attempting to access /var/lib/knot-resolver, which was owned by knot-resolver.

This change makes it possible for both root (user) and knot-resolver (group) to have the same permissions on these directories despite dropped capabilities.