upgrade packages after debootstrap

This makes mkimage-debootstrap upgrade packages after retrieving updated lists of packages.

Fixes #4268
Fixes #4500