vars: add restartUnits option

For secrets not part of the nix store there is no other way in NixOS to
restart a service after the secret is updated. One example is changing
password in userborn, which doesn't run as a activation script but as a
systemd service.

nixosModules/clanCore/vars/secret/sops/default.nix

@@ -48,6 +48,7 @@ in
             group
             mode
             neededForUsers
+            restartUnits
             ;
           sopsFile = builtins.path {
             name = "${secret.generator}_${secret.name}";

nixosModules/clanCore/vars/secret/sops/funcs.nix

@@ -28,7 +28,12 @@ in
             generator = gen_name;
             neededForUsers = file.neededFor == "users";
             inherit (generator) share;
-            inherit (file) owner group mode;
+            inherit (file)
+              owner
+              group
+              mode
+              restartUnits
+              ;
           }) (relevantFiles generator)
         ) generators
       );