Change update-* commands to puppet-* commands to better reflect
what they do.
Support "update-chroot" command that does puppet + dist-upgrade
+ puppet + puppet (with error on changes).