updates.sh: Use CM cherry-pick tool

Automatically pick the latest patch set, less work when doing maintenance