Automatically test that built sysexts actually work with systemd-sysext

[chewi]

This follows #734. It most likely requires a privileged BuildKit. At a minimum, it should test that the sysext merely merges. Ideally, it should allow additional tests to be defined in the spec.