apt module: part rewrite of the upgrade logic, consistently checking the executable paths, adding 'safe' as an alias to yes, and adding 'full' to allow aptitude full-upgrade as an alternative to apt-get dist-upgrade