AppArmor: allow Pidgin to run Tor Browser unconfined, with scrubbed environment (Closes: #8186).

We have no Tor Browser profile yet, and it won't work if we make it inherit
Pidgin's confinement, hence we allow Pidgin to run it unconfined. We'll want to
revert this commit once we confine Tor Browser (#5525).
Merge remote-tracking branch 'origin/bugfix/8189-intel-microcode-v3' into stable
Merge remote-tracking branch 'origin/bugfix/8186-pidgin-http-links' into stable
Merge remote-tracking branch 'origin/test/8140-more-robust-apps-menu' into stable
Merge remote-tracking branch 'origin/test/8059-more-robust-windows-systray' into stable
Merge remote-tracking branch 'origin/feature/7512-Make-GnuPG-config-closer-to-duraconf-reworked' into stable
Merge remote-tracking branch 'origin/feature/7416-gnupg-socks' into stable
Merge remote-tracking branch 'origin/stable' into devel
Use (more) stable URL to fetch Tor Browser 4.0 tarballs.
Fetch Linux 3.16-3 packages from testing (Closes: #8248).

As expected, it was removed from sid. The longer-term fix is tracked by #8249.
Merge branch 'stable' into devel
Merge branch 'devel' into experimental