[tofugarden]

Repository suites ending in a slash were rejected. They are now recognized as
flat repositories, where both the release and package index are at the path
specified by the suite argument. closes #400.

Functional check:

Add to catalog/BUCK, replacing the default debian.testing release:

load("@tine//package_system/deb:rules.bzl", "deb_remote_repository")

kubernetes_repo_url = "https://pkgs.k8s.io/core:/stable:/v1.37/deb"
deb_remote_repository(
    name = "kubernetes.repository",
    baseurl = kubernetes_repo_url,
    suite = "/",
    architectures = _DEBIAN_ARCHITECTURES,
    visibility = ["PUBLIC"],
    signing_keys = {
        "DE15B14486CD377B9E876E1A234654DA9A296436": f"{kubernetes_repo_url}/Release.key",
    },
)

debian.release(
    name = "debian.testing",
    architectures = _DEBIAN_ARCHITECTURES,
    archive_snapshot = "20261107T205437Z",
    # The archive signs a Release with its current key and with the previous key.
    signing_keys = debian.signing_keys("archive-key-12", "archive-key-13"),
    visibility = ["PUBLIC"],
    additional_repositories = [
        ":kubernetes.repository",
    ],
)

Snapshot the new repo:

% bin/tine buck run tine//tools:refresh-catalog -- --box debian.testing.box

Add a new package to examples/image:demo:

image.archive(
    ...
    packages = [...]
    + distribution.select({
        ...
        "debian": ["kubelet"],
    }),
    ...
)

Build the image:

% bin/tine buck run tine//examples/image:demo.debian