ubuntu/sources.tmpl: enable security and updates repositories by default, document proposed-updates and backports