Implement apt pinning for Debian-based hosts

This fixes installation of a specific version of Puppet on
Debian/Ubuntu. Apt gets confused trying to resolve dependencies for
Puppet packages without it.