fix: do not upgrade held packages

[sozercan]

Describe the changes in this pull request using active verbs such as Add, Remove, Replace ...

Removing this flag as it is not recommended by apt

       --allow-change-held-packages
           Force yes; this is a dangerous option that will cause apt to continue without
           prompting if it is changing held packages. It should not be used except in very
           special situations. Using it can potentially destroy your system! Configuration Item:
           APT::Get::allow-change-held-packages. Introduced in APT 1.1.

https://manpages.ubuntu.com/manpages/xenial/man8/apt-get.8.html

Closes #<issue_ID>

[codecov]

Codecov Report

Attention: 1 lines in your changes are missing coverage. Please review.

Comparison is base (5ddc6bc) 32.59% compared to head (b6a8377) 32.59%.
Report is 1 commits behind head on main.

Files	Patch %	Lines
pkg/pkgmgr/dpkg.go	0.00%	1 Missing ⚠️

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #457   +/-   ##
=======================================
  Coverage   32.59%   32.59%           
=======================================
  Files          17       17           
  Lines        1617     1617           
=======================================
  Hits          527      527           
  Misses       1058     1058           
  Partials       32       32           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.