tmpfiles.d recreates the runtime directory as root after package upgrade and the app cannot create its socket anymore

The service runs until reboot or package install, then startup fails because the managed runtime path comes back with different ownership.