Ugly Code

[junaga]

Cleanup

The HTTPS bootstrap in Base is intentionally correct for now:

1. Refresh the existing APT source.
2. Install ca-certificates.
3. Install the Base repository definitions.
4. Remove the old source list.
5. Run the upgrade.

Track a future cleanup that makes this initial HTTPS transition simpler and cleaner without weakening the HTTPS-only repository policy.