refactor(profiles): use @{bin} and @{lib} in profiles (4)

apparmor.d/profiles-a-f/cert-sync

@@ -6,13 +6,13 @@ abi <abi/3.0>,
 
 include <tunables/global>
 
-@{exec_path} = /{usr/,}bin/cert-sync
+@{exec_path} = @{bin}/cert-sync
 profile cert-sync @{exec_path} {
   include <abstractions/base>
 
   @{exec_path} mr,
 
-  /{usr/,}bin/mono-sgen rPx,
+  @{bin}/mono-sgen rPx,
 
   include if exists <local/cert-sync>
 }