added ossec version update support

bash "update-ossec" installs the latest version defined in templates/default.rb and bash "update-ossec-lockfile" creates a lockfile to prevent "update-ossec" from running multiple times.