Fix linux-pam trying to include disabled pam_lastlog.so on login

Build of pam_lastlog.so was disabled by updating to v1.5.3 [1] yet the line
wasn't removed from the login modules. In upstream this was resolved by adding
a config option for turning the lastlog module and dynamic disabling of the
line including it. These changes neither a fix removing the config line were
not applied to 2024.02, so cherry-pick them here to fix the issue.

[1] https://github.com/linux-pam/linux-pam/releases/tag/v1.5.3

Fixes #3789