scripts/update_apt: now it's fatal if we cannot update the pkgs

It was not fatal earlier, when update_apt was part of the main Neubot
repo, because I used to make Neubot releases from many systems.

Now that the script is in a Debian-only repo, it's more robust to abort
if we cannot update the pkgs.