feat(profile): use the new @{tmp} variable.

It is only used with the owner statement.

apparmor.d/groups/freedesktop/accounts-daemon

@@ -75,7 +75,7 @@ profile accounts-daemon @{exec_path} flags=(attach_disconnected) {
   # wtmp.d ?
   /var/log/wtmp r,
 
-  owner /tmp/gnome-control-center-user-icon-@{rand6} rw,
+  owner @{tmp}/gnome-control-center-user-icon-@{rand6} rw,
 
   include if exists <local/accounts-daemon>
 }