cgroup: use a dedicated workqueue for cgroup destruction