user services: Rework the way ceres services are launched in a cleaner systemd-wide way. This also makes those recipes less asteroid-spcecific for systems with a different username.