Update rg

fix permission order

apparmor.d/profiles-m-r/rg

@@ -10,11 +10,11 @@ include <tunables/global>
 profile rg @{exec_path}  {
   include <abstractions/base>
 
+  @{exec_path} mr,
+
   ## Allow reading the entire filesystem to search for strings
   /{,**} r,
 
-  @{exec_path} mr,
-
   include if exists <local/rg>
 }