TL;DR: update AppArmor from 4.0.1 to 4.0.3

detailed version:

- add mesa-cachedir.diff: new cachedir in Mesa 24.2.2

- update to AppArmor 4.0.3
- several small bugfixes
- see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.0.3
for the full release notes

- remove dependency on /usr/bin/python3 using
%python3_fix_shebang macro, [bsc#1212476]

- update to AppArmor 4.0.2
- bugfix release with lots of fixes in all areas
- add new userns profiles for balena-etcher, chromium and wike
- see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.0.2
for the detailed upstream changelog
- drop upstream(ed) patches:
- aa-remove-unknown-fix-unconfined.diff
- logprof-mount-empty-source.diff
- plasmashell.diff
- sampa-rpcd-witness.diff
- sddm-xauth.diff
- teardown-unconfined.diff
- test-aa-notify.diff
- tools-fix-redefinition.diff
- utils-relax-mount-rules-2.diff
- utils-relax-mount-rules.diff
- refresh GPG key (was expired)

- add sampa-rpcd-witness.diff: allow samba-dcerpcd to execute
rpcd_witness (boo#1225811)