debootstrap: verify signatures, patch for --include=sysvinit-core --exclude=systemd-sysv,systemd