units: make sure importd has CAP_LINUX_IMMUTABLE flag

Since d8f9686c we use the chattr +i flag
for marking containers in directories as reead-only. But to do so we
need the cap for it, hence grant it.

Fixes: #19115