apt_repository: fix file mode

'set_mode_if_different' method should be called on destination filename (not temporary filename) and after
'atomic_move' method.

This one allows me to find ansible/ansible#9565.