Local control channel: unprivileged users can trigger --force-update via the running service

internal/service/service_linux.go

@@ -95,6 +95,8 @@ RestartSec=5s
 
 DynamicUser=yes
 StateDirectory=%s
+RuntimeDirectory=%s
+RuntimeDirectoryMode=0755
 %sProtectSystem=strict
 ProtectHome=yes
 PrivateTmp=yes
@@ -117,7 +119,7 @@ SystemCallErrorNumber=EPERM
 
 [Install]
 WantedBy=multi-user.target
-`, exePath, configPath, Name, bind)
+`, exePath, configPath, Name, Name, bind)
 }
 
 // copyFile copies src to dst, creating dst with the given mode.