core: add SystemCallArchitectures= unit setting to allow disabling of non-native

      architecture support for system calls

Also, turn system call filter bus properties into complex types instead
of concatenated strings.