Only install kernel headers on Buster

Since Bullseye, wireguard is a regular kernel module and DKMS is no longer
required. Installing linux-headers-amd64 does not work on non-amd64 systems.