core: replace OnFailureIsolate= setting by a more generic OnFailureJobMode= setting and make use of it where applicable

build-sys: don't hard-code binary paths in initrd-*.service Instead use @bindir@ for udevadm and @rootbindir@ for systemctl.