APT repo recreated (on update / open)

An updated patch for completely seamless upgrades, and only when supported:

--- a/after-install.sh
+++ b/after-install.sh
@@ -20,11 +20,32 @@
   curl -fsSo "$TEMPDIR/1password.pol" https://downloads.1password.com/linux/debian/debsig/1password.pol
 
   # Setup apt repository
-  cp "$TEMPDIR/1password.gpg" /usr/share/keyrings/1password-archive-keyring.gpg
-  cat > /etc/apt/sources.list.d/1password.list <<-EOM
+  KEYRING=/usr/share/keyrings/1password-archive-keyring.gpg
+  cp "$TEMPDIR/1password.gpg" "$KEYRING"
+  TYPES=deb
+  ARCH=amd64
+  COMPONENTS=main
+  URI=https://downloads.1password.com/linux/debian/$ARCH
+  SOURCES=/etc/apt/sources.list.d/1password.sources
+  LIST=${SOURCES%.*}.list
+  if [ -e "$SOURCES" ] || aptSupportsSources; then
+    cat > "$SOURCES" <<- EOM
 # This file is automatically added and configured by the 1Password package. Modifications may be overwritten.
-deb [arch=amd64 signed-by=/usr/share/keyrings/1password-archive-keyring.gpg] https://downloads.1password.com/linux/debian/amd64 ${CHANNEL} main
+Types: $TYPES
+URIs: $URI
+Suites: $CHANNEL
+Components: $COMPONENTS
+Architectures: $ARCH
+Signed-By: $KEYRING
 EOM
+    ! [ -e "$LIST" ] || rm "$LIST"
+  else
+    cat > "$LIST" <<- EOM
+# This file is automatically added and configured by the 1Password package. Modifications may be overwritten.
+$TYPES [arch=$ARCH signed-by=$KEYRING] $URI $CHANNEL $COMPONENTS
+EOM
+  fi
+
   # Setup debsig verification
   mkdir -p /etc/debsig/policies/AC2D62742012EA22/
   mv "$TEMPDIR/1password.pol" /etc/debsig/policies/AC2D62742012EA22/1password.pol
@@ -35,6 +56,11 @@
   rm -rf "$TEMPDIR"
 }
 
+aptSupportsSources() {
+  # Tests without making changes
+  apt modernize-sources --assume-no >/dev/null 2>&1
+}
+
 installRpmChannel() {
   case $CHANNEL in
     "stable")
v "$TEMPDIR/1password.pol" /etc/debsig/policies/AC2D62742012EA22/1password.pol