SECURITY UPDATE: systemctl may pass arbitrary shell commands from a
pager like more(1) that does not honor LESSSECURE, allowing privilege
escalation under sudo.
debian/patches/CVE-2023-26604.patch: set LESSSECURE=1 when invoking
a pager, rename to SYSTEMDPAGERSECURE, gate insecure pagers behind
sdpidgetowneruid()/euid check, skip non-"less" pagers in secure
mode, and read the envvar via securegetenv(). Squash of upstream
commits 612ebf6c91, 0a42426d79, and b8f736b30e (src/shared/pager.c
only; man-page hunks dropped).