SECURITY UPDATE: systemctl may pass arbitrary shell commands from a
pager like more(1) that does not honor LESSSECURE, allowing privilege
escalation under sudo.
debian/patches/CVE-2023-26604.patch: set LESSSECURE=1 when invoking
a pager, rename to SYSTEMD_PAGERSECURE, gate insecure pagers behind
sd_pid_get_owner_uid()/euid check, skip non-"less" pagers in secure
mode, and read the envvar via secure_getenv(). Squash of upstream
commits 612ebf6c91, 0a42426d79, and b8f736b30e (src/shared/pager.c
only; man-page hunks dropped).