Create run-nosymfollow.mount

We currently set the nosymfollow mount up in https://gitlab.tails.boum.org/tails/tails/blob/e0600763f99d49b900eb9f3f9d61ac44d99b9490/config/chroot_local-includes/usr/local/lib/persistent-storage/pre-start. We should use a systemd .mount file instead once the mount(8) we have in Tails supports changing the nosymfollow option along with --bind.

It's already implemented in the related branch: https://gitlab.tails.boum.org/tails/tails/-/compare/stable...19487-run-nosymfollow-mount

Missing:

• update references to pre-start script that's removed by the commit referenced above
• Jenkins workers run Bookworm (part of sysadmin#17982 (closed)), so "Scenario: Tails Persistent Storage behave tests" can pass