Missing signed-by stanza in sources.list configured by omv salt

OMV writes the sources.list upstream regular trixie repo config as such in /etc/apt/sources.list :

# moved to sources.list.d
deb http://deb.debian.org/debian trixie main contrib non-free non-free-firmware
deb http://deb.debian.org/debian trixie-updates main contrib non-free non-free-firmware

Thus it is missing the signed-by stanza for using the default /usr/share/keyrings/debian-archive-keyring.gpg to verify packages.

To Reproduce

Steps to reproduce the behavior:

1. Let omv configure the repositories

Expected behavior

Repo config lines include the signed-by stanza as recommended by distro guidelines.

Additional context

Add any other context about the problem here.