wkd_sync/archlinux-keyring-wkd-sync.service: Add hardened systemd service to run WKD sync using `archlinux-keyring-wkd-sync`.