feat: improve dbus integration for chsh, better handling of generic needrestart.

.github/local/needrestart

@@ -0,0 +1,2 @@
+
+  /var/lib/waagent/** r,

.github/workflows/main.yml

@@ -94,6 +94,7 @@ jobs:
           sudo apt-get install -y \
             apparmor-profiles apparmor-utils \
             bats bats-support
+          sudo install -Dm0644 .github/local/needrestart /etc/apparmor.d/local/needrestart
 
       - name: Install apparmor.d
         run: |