Properly run apt-get update as an ONBUILD step

The "apt-get upgrade" ONBUILD step is moot without first updating the
local package list.