Disable incus-agent exec and file transfer support by default, re-enable through systemd-cred

[stgraber]

By default the Incus agent should be configured to disable exec and file transfers, then a systemd credential would allow re-enabling that on the VM but will have it flagged in a similar way to when booted with Secure Boot or TPM 2.0 disabled.