openvpn: update and wrap update-systemd-resolved

The string replacement we were doing was just too brittle, so wrap the
script with a modified PATH instead as it is less likely to break on new
versions.