System patching script

[rin-skylight]

In addition to the update script for the containers, we can include an optional script that runs patching on this machine. This would be handy for STLTs who do not have policies for management of Linux machines, or who do not have routine patching mechanisms via ansible or others for updating their machines.

Acceptance criteria:

• Script should update all packages using apt
• Security patches or firewall upgrades, if desired
• Anything else you think might be prudent