Fix-committed: #6394

Fix-committed: #9094

Fix-committed: #6558

Fix-committed: #8991

This is now done with an [[!inline]] directive.

It breaks parsechangelog.

Fix-committed: #9070, #9071

We use *.changes above, so let's just do the same again.

We check their hashes anyway, but hey, why not. And anyway, otherwise
this curl command doesn't work (unless one adds --location to honor
redirect — to HTTPS — headers).

Fix-committed: #8964, #6985

Closes: #9085

We've merged feature/8740-new-signing-key-phase-2 into stable a few days ago, so
the code in stable/devel/etc. only trusts the new signing key, while the 1.3 UDF
are still signed with our old signing key. Tails 1.3 trusts both the old and new
signing keys, so this should be alright both for it and for anything that has
feature/8740-new-signing-key-phase-2 merged in.

Will-fix: #9085