feat(profile): general update.

Also include some preparation for the systemd profile.

apparmor.d/groups/systemd/systemd-resolved

@@ -55,6 +55,8 @@ profile systemd-resolved @{exec_path} flags=(attach_disconnected) {
         @{run}/systemd/resolve/{,**} rw,
   owner @{run}/systemd/journal/socket w,
 
+  @{PROC}/@{pid}/cgroup r,
+  @{PROC}/pressure/* r,
   @{PROC}/sys/kernel/hostname r,
   @{PROC}/sys/net/ipv{4,6}/conf/all/disable_ipv{4,6} r,