custom-apt-cruft-check: look in contrib and non-free sources as well

Apparently this was overlooked so we only look for source packages from main, which caused problems on #18558 (closed).

Note that the branch name is wip/ but I just didn't want jenkins to building images for this.