Initial stab at adding a discrete step to perform OS patch management.
Set with the "UPDATE := true"  variable in Makefile.local or
"update=true" in the template .json.