fix: restore PATH for systemd-run and use AllowedCPUs

scripts/with-memory-cap.sh

@@ -181,7 +181,7 @@ run_systemd() {
 	# expliciet: deze host heeft geen swap.
 	local high=$((effective * 95 / 100))
 	echo "[mem-cap] systemd cgroup MemoryHigh=$((high / 1024 / 1024))MB MemoryMax=$((effective / 1024 / 1024))MB MemorySwapMax=0: $*" >&2
-	exec "${systemd_cmd[@]}" -p "MemoryHigh=$high" -p "MemoryMax=$effective" -p "MemorySwapMax=0" -p "CPUAffinity=$cpu_affinity" "$@"
+	exec "${systemd_cmd[@]}" -E "PATH=$PATH" -p "MemoryHigh=$high" -p "MemoryMax=$effective" -p "MemorySwapMax=0" -p "AllowedCPUs=$cpu_affinity" "$@"
 }
 
 run_ulimit() {