ci: remove the unused apt sources by content, not by filename

The first attempt named `google-chrome.list`, and `apt-get update` failed on
the same URL: on ubuntu-24.04 the runner writes deb822 `.sources` files, so
the filename was a guess and the guess was wrong.

Selected by what the file CONTAINS now. That is the same correction
`libs/hostlib.lua` records for library directories: a layout you assume is a
layout you are wrong about on some machine.

Author: speak-agent

.agents/docs/2026-09-09-dlopen-surface-and-two-unwinders.md

@@ -662,6 +662,9 @@ else moves when they land".
 | | a non-hermetic binding, or `allow_host_libs` | silent, for the reason the artifact verdict is |
 | R6 (one unwinder) | a libc++ link line naming libstdc++ | `--unwindlib=libgcc` and hidden archives |
 | | every other link | byte-for-byte unchanged, asserted in `test_distribution.cpp` |
+| R7 (`compat:opencl` declared) | every SYCL project | the OpenCL back end loads; one shared library and one symlink farm added to the graph |
+| | the two defects in §8.5 | latent before, active from the moment a shared library entered a SYCL plan |
+| `compat.opencl` on Windows | a Windows OpenCL consumer | a loader to link, where there was none; no adapter, because the system loader needs no help |
 
 The one regression this could cause is in §7's last item: an executable that
 deliberately re-exports the C++ standard library to a plugin it `dlopen`s. It

.github/workflows/cross-build-test.yml

@@ -105,8 +105,13 @@ jobs:
           # killed two cross-build jobs in setup, before a single byte was
           # compiled. Dropping the lists this job has no use for is what makes
           # the step's failure mean something about this job.
-          sudo rm -f /etc/apt/sources.list.d/google-chrome.list \
-                     /etc/apt/sources.list.d/microsoft-prod.list || true
+          #
+          # BY CONTENT, NOT BY FILENAME. The first attempt removed
+          # `google-chrome.list` and the update failed on the same URL: on
+          # ubuntu-24.04 the runner writes deb822 `.sources` files, so the
+          # name was a guess and the guess was wrong.
+          sudo grep -rlE 'dl[.]google[.]com|packages[.]microsoft[.]com' \
+               /etc/apt/sources.list.d/ 2>/dev/null | xargs -r sudo rm -f
           sudo apt-get update -qq
           sudo apt-get install -y qemu-user-static
           ${{ matrix.qemu_bin }} --version | head -1
@@ -265,8 +270,13 @@ jobs:
             # killed two cross-build jobs in setup, before a single byte was
             # compiled. Dropping the lists this job has no use for is what makes
             # the step's failure mean something about this job.
-            sudo rm -f /etc/apt/sources.list.d/google-chrome.list \
-                       /etc/apt/sources.list.d/microsoft-prod.list || true
+            #
+            # BY CONTENT, NOT BY FILENAME. The first attempt removed
+            # `google-chrome.list` and the update failed on the same URL: on
+            # ubuntu-24.04 the runner writes deb822 `.sources` files, so the
+            # name was a guess and the guess was wrong.
+            sudo grep -rlE 'dl[.]google[.]com|packages[.]microsoft[.]com' \
+                 /etc/apt/sources.list.d/ 2>/dev/null | xargs -r sudo rm -f
             sudo apt-get update -qq
             sudo apt-get install -y --download-only wine64 wine \
               || sudo apt-get install -y --download-only wine

.github/workflows/openkal-cross.yml

@@ -374,8 +374,13 @@ jobs:
           # killed two cross-build jobs in setup, before a single byte was
           # compiled. Dropping the lists this job has no use for is what makes
           # the step's failure mean something about this job.
-          sudo rm -f /etc/apt/sources.list.d/google-chrome.list \
-                     /etc/apt/sources.list.d/microsoft-prod.list || true
+          #
+          # BY CONTENT, NOT BY FILENAME. The first attempt removed
+          # `google-chrome.list` and the update failed on the same URL: on
+          # ubuntu-24.04 the runner writes deb822 `.sources` files, so the
+          # name was a guess and the guess was wrong.
+          sudo grep -rlE 'dl[.]google[.]com|packages[.]microsoft[.]com' \
+               /etc/apt/sources.list.d/ 2>/dev/null | xargs -r sudo rm -f
           sudo apt-get update -qq && sudo apt-get install -y -qq qemu-user
           "$XLINGS_BIN" install xim:qemu-riscv -y
           XLINGS_HOME="${MCPP_HOME:-$HOME/.mcpp}/registry" \

.github/workflows/release.yml

@@ -281,8 +281,13 @@ jobs:
           # killed two cross-build jobs in setup, before a single byte was
           # compiled. Dropping the lists this job has no use for is what makes
           # the step's failure mean something about this job.
-          sudo rm -f /etc/apt/sources.list.d/google-chrome.list \
-                     /etc/apt/sources.list.d/microsoft-prod.list || true
+          #
+          # BY CONTENT, NOT BY FILENAME. The first attempt removed
+          # `google-chrome.list` and the update failed on the same URL: on
+          # ubuntu-24.04 the runner writes deb822 `.sources` files, so the
+          # name was a guess and the guess was wrong.
+          sudo grep -rlE 'dl[.]google[.]com|packages[.]microsoft[.]com' \
+               /etc/apt/sources.list.d/ 2>/dev/null | xargs -r sudo rm -f
           sudo apt-get update -qq
           sudo apt-get install -y curl git build-essential qemu-user-static
           qemu-aarch64-static --version | head -1