Add support for `reboot-apply`

[cgwalters]

Since the latest systemd supports "soft reboots", we can distinguish whether there's a kernel update pending and invoke systemctl reboot or systemctl soft-reboot as appropriate.