*.install: Setup update repo once for all

Many roles where defining update & security repositories while it was
already done by base.install. Let's remove all this code duplication