Using profile path name is deprecated, see:
https://gitlab.com/apparmor/apparmor/-/wikis/DeprecateProfilePathName



Signed-off-by: Simon Deziel <simon@sdeziel.info>

Signed-off-by: Simon Deziel <simon@sdeziel.info>

d/control: revert python3-dev dependency changes since autopkgtests does not work on salsa-ci anyway

This reverts commit 87709bbe.

Apparently recursive DNS does not work on salsa-ci, unbound never sees any
replies to its root NS priming requests sent to every locally cached root
nameservers.

since unbound itself links to libpython, and its python interface
is used to write extensions, it can only use a single version of
python at a time, and this applies to architecture too.  There's
no reason to build-depend on "any" architecture of python-dev,
only the default architecture fits.

This fixes, for one, an autopkgtest failure on salsa-ci which is
due to autodep8 bug #904999, - which tries to run tests with
multiple python versions if the package build-depends on :any
variant of python3-dev.

* Rename d/resolvconf to d/resolvconf-forwards, to make it more
  explicit we're adding forwarders to unbound not pushing unbound
  as a nameserver

* Add comments to this file (which is installed as
  /etc/resolvconf/update.d/unbound) describing what it is
  for and how it is used.

* Add an alternative way to turn this hook off  by specifying
  USE_RESOLVCONF_FORWARDS=false in /etc/default/unbound.

* Do not rely on the presence of  unbound-control keys/certs,
  since unbound-control can work over unix-domain socket too.

* Do not hide possible error messages produced by unbound-control
  since this makes debugging difficult.

* Other less visible changes and cleanups.

* Install it with execute permissions (0755 instead of 0644) -
  this will enable this script for new installs, but will keep
  it disabled for old installs

There's almost no common parts left between the old file and
the new file.

We should not automatically start the unbound-resolvconf.service helper
service, it is (re)started as part of the main unbound.service.
In debhelper compat level >= 10 the startup is done automatically.