Make cdb_invalidate_varnish only usable by the superuser

Set update_timestamp trigger function to a security definer.
Fix definition of update_timestamp function.