- systemd: add ExecStartPre to chown -R the data dir before every start
- postinst: add chown -R after creating dirs to fix ownership on upgrades
This prevents the service from failing if dirs were created by root or
drifted ownership after a manual run.