This marks all packages installed by `debootstrap` as automatic and
sets up policy for pruning purposes before purging unneeded ones.
The devuan-keyring is explicitly kept.
This integrates a custom script into the APT configuration. That same
script is also run during the bootstrap. A second custom script takes
care of the integration and removes itself when done.
Complements 13f84159.