add unattended-upgrades config
move additions submodules to $NZ_PATH