systemd: explicitly add kresd@ to system-kresd.slice

By some magic (unknown so far) the service was ending up in the slice
anyway, but it seems much better to put it there explicitly.
Closely related to !925.
25 jobs for systemd-slice
in 10 seconds and was queued for 4 seconds