cryptsetup: umount encrypted devices before detaching it during shutdown

This is done by ordering local-fs-pre.target and remote-fs-pre.target after
cryptsetup.target and remote-cryptsetup.target respectively.

Fixes: #8472