apt module: part rewrite of the upgrade logic

apt module: part rewrite of the upgrade logic, consistently checking the executable paths (a bare install (e.g. debootstrap) might not include aptitude), adding 'safe' as an alias to yes, and adding 'full' to allow aptitude full-upgrade as an alternative to apt-get dist-upgrade