add unattended-upgrades package plus configuration