deploy-chroot: Create kvm device instead of bind-mounting it.

Fixes #476.

Checklist:

[x] I have split up this change into one or more appropriately-delineated commits.
[x] The first line of each commit is of the form "[component]: do something"
[x] I have written a complete, multi-line commit message for each commit.
[x] ~I have formatted any Go code that I have changed with gofmt.~
[x] ~I have written or updated appropriate documentation to cover this change.~
[x] ~I have confirmed that this change is covered by at least one appropriate test run by CI.~
[x] If my change includes new or modified functionality, I have tested that the changes work as expected.
[x] I have assigned this issue to an appropriate reviewer. (Choose @celskeggs if you are not otherwise certain.)
[x] I consider my PR complete and ready to be merged without my further input, assuming that it passes CI and code review.
[x] My changes have passed CI, including an automatic Jenkins deploy.
[x] My changes have passed code review.

sipb / homeworld