Use full -Syu transactions, no partial upgrades

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01QKxGW1raAWaqeU8WdHsMsp

packages/build-keyring.sh

@@ -7,7 +7,7 @@ ROOT=$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")/.." && pwd)
 
 docker run --rm -v "$ROOT:/src:ro" -v "$ROOT/packages/out:/out" archlinux/archlinux:latest bash -c '
 set -euo pipefail
-pacman -Sy --noconfirm --quiet base-devel > /dev/null
+pacman -Syu --noconfirm --quiet base-devel > /dev/null
 useradd -m builder
 cp -r /src/packages/omarchycn-keyring /home/builder/pkg
 cp /src/cn/keys/omarchycn-registry.asc /home/builder/pkg/omarchycn-registry.key