Move tmpfiles.d configuration handling back to spec file
    
    Since ipaapi user is now created during RPM install and not in runtime,
    we may switch back to shipping tmpfiles.d configuration directly in RPMs
    and not create it in runtime, which is a preferred way to handle drop-in
    configuration anyway.
    
    This also means that the drop-in config will be shipped in /usr/lib
    instead of /etc according to Fedora packaging guidelines.
    
    This partially reverts commit 38c66896de1769077cd5b057133606ec5eeaf62b.
    
    https://pagure.io/freeipa/issue/7053
    
    Reviewed-By: Tibor Dudlak <tdudlak@redhat.com>