AppArmor: various updates including 1 important fix for Debian Trixie

The important bit here is the first commit (692e28a1) which closes Debian#1098845. It would be great to have this merged soon so that the Debian maintainers can include this fix in time for the Trixie freeze.

Everything else is optional. I'm bundling this together to save us all some QA time.