Allow non-interactive upgrades with apt

[adskyiproger]

Describe the bug

Canonical does upgrade configuration files distributed as deb packages, like we do as well with our ansible scripts.
From time to time the interactive message will pops-up while running apt-get upgrade. In some cases like upgrade for openssh-server (/etc/ssh/sshd_config) we may get ssh server down after failed upgrade.
Pop-up dialog leaves configuration files and service in pending state, no new ssh connection can be established until restart.

To Reproduce

Precondition: pending openssh-server upgrade

Steps to reproduce the behaviour:

1. Run apt upgrade -y in non-interactive mode or Provision workflow from GitHub
2. After running Provision workflow system will stop accepting new ssh connections, same should happen after running apt upgrade -y without answering to pop-up dialog.

Expected behaviour

System behaves as expected, we need to perform changes on our side to avoid that kind of pop-up messages.

Pop-up dialog should appear in case of changes to configuration files distributed as deb packages.

Actual behaviour

Actual behaviour respect to expected behaviour

Screenshots

Failed workflow: https://github.com/opencrvs/opencrvs-farajaland/actions/runs/16370780984/attempts/2

(Paste the link to an example project and exact instructions to reproduce the issue.)

[adskyiproger]

Initial goal was to avoid editing system configuration files, but the scope of work could be reduced to allowing non-interactive upgrades https://docs.ansible.com/ansible/latest/collections/ansible/builtin/apt_module.html#parameter-dpkg_options

See related PRs:

• fix: Allow non-interactive upgrades with apt infrastructure#116
• fix: Allow non-interactive upgrades with apt opencrvs-countryconfig#1080

@euanmillar , I do believe issue was not properly estimated. If IET is satisfied with the results please close the issue as completed