[package] base-files: mark /etc/shadow as conffile