Ensure apt-get update runs before package installs.

Without this, apt-get update can run after attempting to install a
package, meaning that the package install can fail.

This is lifted straight from the main puppet repo.