Use Linux-specific variable names.
Include syslinux.exe for win32 in utils/win32/ on the ISO filesystem.

The APT config mangling is made in the chroot, as that's where all keys
corresponding to the configured APT repos can be found, and the APT pinning has
been setup. Note that, when this hook runs, the SquashFS has been generated
already, so modifying the content of the chroot at this point should not affect
the resulting ISO much.
Set the Unsafe Browser's red theme in the profile that's actually used.
Merge remote-tracking branch 'origin/feature/7425-ship-win32-syslinux' into testing
Merge remote-tracking branch 'origin/bugfix/7473-unsafe-browser-theme' into testing