Ansible role to (auto-)upgrade installed packages