ensure data is owned correctly in neon addditions

debian is doing away with the recursive chown so we need to ensure
ownership is correct in our neon addition blocks

specifically the pulseaudio disabling now uses runuser and the heredoc
catting is then chmod+chown'd