debian: Use a configurable group for the Jenkins user

Typical Debian practice is to have one equally-named group per system
user.  Make that for the jenkins user by default, but allow it to be
overridden in /etc/default/jenkins, same as for the user name.