Switch from apt -o to APT_CONFIG

apt command-line options are applied after all other apt config,
so they cannot easily be used to isolate apt from the system config.

APT_CONFIG is read before any other apt configuration so it can.