feat(apt): Add non-free-firmware component to all repos

We're doing this because at the end of the Proxmox VE 8 lifecycle in
August of 2025 the pve8to9 migration check script indicated if would
be potentially beneficial to install the amd64-microcode package for
microcode updates to our processor.

We agree which is why we need the non-free-firmware component to be
able to install amd64-microcode.

files/usr/share/javascript/proxmox-widget-toolkit/proxmoxlib.js.patch

@@ -1,14 +1,12 @@
 # SPDX-License-Identifier: MIT
---- proxmoxlib.js.orig	2024-11-19 12:40:04.000000000 +0100
+--- proxmoxlib.js.orig  2025-07-16 00:33:18.000000000 +0200
-+++ proxmoxlib.js		2024-12-25 08:54:10.283639449 +0100
++++ proxmoxlib.js       2025-08-06 00:01:50.479413166 +0200
-@@ -575,8 +575,8 @@
+@@ -614,7 +614,7 @@
- 		    let res = response.result;
+                         !res ||
- 		    if (res === null || res === undefined || !res || res
+                         res.data.status.toLowerCase() !== 'active'
- 			.data.status.toLowerCase() !== 'active') {
+                     ) {
--			Ext.Msg.show({
+-                        Ext.Msg.show({
--			    title: gettext('No valid subscription'),
++                    void({
-+			void({
+                             title: gettext('No valid subscription'),
-+				title: gettext('No valid subscription'),
+                             icon: Ext.Msg.WARNING,
- 			    icon: Ext.Msg.WARNING,
+                             message: Proxmox.Utils.getNoSubKeyHtml(res.data.url),
- 			    message: Proxmox.Utils.getNoSubKeyHtml(res.data.url),
- 			    buttons: Ext.Msg.OK,

tasks/repo-enable-non-free.yml

@@ -1,8 +1,8 @@
 # SPDX-License-Identifier: MIT
-- name: 'In ''/etc/apt/sources.list'' enable non-free component in all Debian-native repos'
+- name: 'In ''/etc/apt/sources.list'' enable non-free and non-free-firmware components in all Debian-native repos'
   ansible.builtin.replace:
     path: '/etc/apt/sources.list'
-    regexp: '^(.*?)( main contrib(?! non-free))'
+    regexp: '^(.*?)( main contrib(?! non-free non-free-firmware))'
-    replace: '\g<1>\g<2> non-free'
+    replace: '\g<1>\g<2> non-free non-free-firmware'
   notify:
     - 'apt-get update'