Make 1password role use consistent filenames on Debian

roles/1password/tasks/Debian.yaml

@@ -1,10 +1,13 @@
 ---
+- set_fact:
+    keyring: /etc/apt/trusted.gpg.d/1password-archive-keyring.gpg
+
 - name: add apt signing key
   when: '"WSL" not in ansible_kernel'
   become: true
   apt_key:
     url: https://downloads.1password.com/linux/keys/1password.asc
-    keyring: /etc/apt/trusted.gpg.d/1password-archive-keyring.gpg
+    keyring: '{{keyring}}'
     state: present
 
 - when: ansible_machine == 'x86_64'
@@ -20,9 +23,9 @@
   become: true
   apt_repository:
     repo: >-
-      deb [arch={{arch}}
+      deb [arch={{arch}} signed-by={{keyring}}]
-      signed-by=/etc/apt/trusted.gpg.d/1password-archive-keyring.gpg]
       https://downloads.1password.com/linux/debian/{{arch}} stable main
+    filename: 1password
 
 - name: install gui package
   when: '"WSL" not in ansible_kernel'

roles/gh/tasks/Debian.yaml

@@ -31,8 +31,6 @@
     update_cache: true
   register: gh_apt
 
-- debug: msg={{gh_apt}}
-
 - name: install zsh completions
   when: gh_apt.changed
   become: true

roles/jq/tasks/Debian.yaml

@@ -1,5 +1,6 @@
 ---
 - name: install apt package
+  become: true
   apt:
     name: jq
     state: latest