fdroidserver refuses a repo_url that doesn't end in /repo, but only at `fdroid update`, after the APK was already copied in. The leftover APK then made every retry think that version was published. Check the URL up front, and take the APK back out if the update fails. FDROID_REPO_URL now also updates repo_url in an existing repo, instead of being read only when the repo is created.