guix: add local dovecot mail server to chaman

note: the dovecot/auth process runs as a non-root `dovecot' user,
which needs to be able to read the passwd file.  therefore, the file
itself needs to have the read bit set accordingly, and its parent
directories need the executable bit.