promtail: Give access to the logrotated nginx access.log files
The files are initially created by nginx as 0644/http:root, but when logrotate rotates the files it creates the new files as 0640/http:log, which promtail can't read.
Fix the issue by adding the log group as a supplementary group.