Update generated sources.list order to match what src:apt-setup generates
Update generated sources.list order to match what src:apt-setup generates

This places security above "-updates", which makes sense (we generally want to prefer security-provided packages in the case of the same version existing in both places, even though they _should_ be identical), but more importantly, matches what the Debian installer itself generates.

debuerreotype/debuerreotype