An apt mirror trust check starts failing (legacy-trusted-gpg-check-missed-new-keyring-location)

The system trusts the mirror interactively, yet the unattended hook reads the older keyring path and treats the rotated key as missing.