puppet nftables

Temporarily use /bin/ for systemctl and echo paths in Debian 10

Debian Buster has symlinks from usrmerge that resolve to /bin/X,
but systems upgraded from Stretch or earlier that haven't installed
usrmerge will not have anything in /usr/bin/X.

This should be removed once every installation we have has had...