Given the lack of caching for the internal apt pointers between
tasks, we're not gaining anything from a copy&paste of the
internal apt update code, and so it's easier to just do callouts
into python for the cache refresh.
This also means we need a backends/apt/helpers folder, and the
config changes for that