oniro-linux.conf: Avoid removing shadow for ro filesystems

There are files in shadow (for example subid files) that are required at
runtime too - for example for podman rootless support. Make sure this
package is not removed even when disto/image is dealing with a ro
rootfs.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>