update example index url to be raw
don't create cowbuilder with backports/security/updates
fix mirror/keys, have to use env variable for ros_deb